Role Description Bakkt is seeking a strategic, Chief Information Security Officer (CISO) to lead our global information security posture and serve as our designated officer for regulatory cybersecurity compliance. This role is designed for an innovative leader who thrives at the intersection of modern engineering velocity and institutional-grade risk management. As we scale our Agentic AI and Stablecoin settlement infrastructure, you will lead a progressive security function that moves far beyond "check-the-box" compliance. Reporting directly to executive leadership with a dotted line to the Board of Directors, you will have the authority to build a defensible, automated security program that serves as a core enabler for our business growth. Qualifications - CISSP required, or a demonstrably equivalent executive credential (CISM, CCISO, or CISA). - 12+ years in Information Security, with significant experience operating within a NYDFS-regulated or SEC-reporting public company environment. - Proven success leading security in distributed, cloud-driven (AWS/GCP) environments. Direct experience with stablecoin protocols or AI-driven financial tools is a strong advantage. - Master’s degree (Cybersecurity, MIS, or MBA) and/or senior-level professional designations like GSLC or equivalent executive cybersecurity leadership training. Requirements - Serve as the designated CISO responsible for Bakkt's cybersecurity program in accordance with NYDFS Part 500 requirements. - Oversee comprehensive annual risk assessments and manage our annual certification of compliance process. - Lead our organizational process for determining the materiality of cybersecurity incidents. - Oversee the timely preparation of all required disclosures and filings in accordance with public market regulations and governance standards. - Provide quarterly Material Security Risk briefings to the Audit Committee of the Board. - Maintain and evolve our security controls to support international settlement expansion. - Establish the governance and security framework for autonomous AI agents. - Oversee the security of our end-to-end stablecoin lifecycle. - Architect a comprehensive security model that applies consistent rigor to both human and non-human identities. - Transition our operations from manual GRC to Continuous Controls Monitoring (CCM). - Foster an internal culture where security is built-in from the start. - Implement a threat-modeling process that prioritizes fixes based on real-world business impact. - Own the global Incident Response and Business Continuity plans. - Manage the security lifecycle of critical banking and ICT partners. - Lead, develop, and motivate a high-performing team of security subject matter experts. Benefits - Equal opportunity employer. - Diversity in the workforce. - Must successfully pass a post-offer background check and drug screen. Company Description Bakkt is devoted to having diversity in its workforce and is proud to be an equal opportunity employer. Bakkt does not make any employment decisions based on race, color, religion, sex, national origin, veteran status, disability, age, sexual orientation, gender identity or any other characteristic protected by law.

• Serve as Cohesity's primary healthcare industry voice externally — speaking at conferences, authoring content, and engaging with healthcare executives, CIOs, CISOs, and CTOs as a credible peer and trusted advisor. • Partner with field sales and SE teams on strategic opportunities, participating in executive briefings, workshops, and proof-of-concept engagements with healthcare customers and prospects. • Translate complex healthcare data challenges — including data protection, ransomware resilience, regulatory compliance, and AI-readiness — into compelling narratives that connect to Cohesity's platform capabilities. • Build and maintain relationships with key industry bodies, health systems, payers, and technology partners in the healthcare ecosystem. • Act as the primary conduit between the healthcare field and Cohesity's Product Management organization, surfacing customer requirements, validating roadmap priorities, and advocating for capabilities critical to the vertical. • Develop and maintain Cohesity's healthcare-specific point of view — including use cases, reference architectures, and competitive positioning — in close collaboration with product, marketing, and engineering. • Inform go-to-market strategy for healthcare, including segmentation, solution packaging, and partnership priorities. • Enable and upskill account teams on healthcare-specific selling motions, industry dynamics, regulatory requirements, and technical architectures. • Serve as an escalation resource for complex technical or strategic situations in key healthcare accounts.

Role Description We have a beta version of our product that's almost ready for prime time. We need someone who can take it there. This is a senior leadership role reporting directly to our CEO, and it's a genuine seat at the table. You won't be handed a finished roadmap and told to execute it. You'll build the vision for our Tier 2 and Tier 3 intervention curriculum, shape how it comes to market, and closely track data to understand how this tool changes the work for teachers and outcomes for kids. If you've ever wanted to lead product at a company small enough that your fingerprints are on everything and you can have a real transformative impact, this is that job. What You'll Actually Do - Own the vision, strategy, and roadmap. - Take our beta tool from where it is to where it needs to be, and chart the course to get there. - Know the market cold. - Stay ahead of what's happening in ed-tech, understand the competitive landscape, and let that knowledge sharpen every product, design, and development decision. - Think like a business owner. - Build the go-to-market strategy for our curriculum product, bring us cost analysis and investment recommendations, and manage the budget so our resources go where they'll have the biggest impact. - Work across our team. - Partner closely with curriculum, assessment, and engineering to build new features and sequence what gets built when. - Test relentlessly. - Design pilots, run interviews and focus groups, build advisory relationships, and let real user feedback drive real product decisions. - Design and build alongside your team. - Collaborate with designers, our Director of Curriculum, and engineering to keep iterating. Show up for human-centered design work, follow the data and the prototypes, and lead your cross-functional team from idea to shipped product. - Be our product expert. - Work hand in hand with marketing, sales, and implementation. Show up for customer conversations, sales meetings, and pilot support when it counts. Qualifications - BA/BS degree and at least 5 years of relevant product management experience in education technology or a related field, including K-12 curriculum. - Demonstrated strategic mindset with the ability to set vision and drive execution. - Data-driven approach to product decisions and measuring success. - Experience working in the K-12 education sector. - Experience managing engineering teams. - U.S. work authorization. Preferred - Experience taking a curriculum product to market. - Familiarity with literacy or intervention programs. - Fluency in state supplementary curriculum adoption markets. - Advanced degree. - Classroom teaching experience. - Familiarity with K-12 tutoring services, ed-tech, or similar fields. - Strong experience in leadership roles. - Understanding of the MTSS landscape from both the buyer and user perspective. How to Apply - Complete the online application at OpenLiteracy.com/jobs. - Answer a few role-focused questions. - Meet with our leadership team for an initial conversation. - Meet with our CEO for a final interview. - Complete references, a criminal background check, and educational verification. Benefits - Location that works for you: Based in Pittsburgh or remote anywhere in the U.S., though we do give priority to Pittsburgh-based applicants. - Real influence: As part of our executive team, your decisions will shape the direction of a growing, mission-driven company, not just a product line. - Work you'll be proud of: This is a rare shot at building an education product that's directly improving literacy outcomes for kids across the country with proven documented impact already in the books. - Solid pay and benefits: We're a small, growing Pittsburgh-based company that takes care of our people: 15 company paid days off, 401(k) with company contribution, and health care options. - Work with a team who cares: We are a women-owned, women-led business. We value diversity and prioritize a work-life balance. We are not a grind it out at all hours of the night tech start-up.

• Directly manage the four functional leads — GRC, AppSec, Cloud/Vulnerability, and SecOps — setting priorities, removing blockers, and holding them accountable to delivery. • Own the operational roadmap behind SOC 1 and SOC 2: continuous evidence collection, control owners, and audit readiness ahead of annual audits. • Drive the FedRAMP High authorization effort and the parallel GovRAMP pursuit — both multi-year, high-cost programs (FedRAMP High alone typically runs 12–24 months and $500K–$1M+) — translating authorization requirements into workstreams, milestones, and owners. • Report program status, risks, and resourcing needs to the CISO with enough detail to support executive and board reporting.