Tract Capital

Tract Capital

Chief Information Security Officer (CISO)

Denver, CO · Exec

Sponsorship not specified$53k-$800kDetected 23 hours ago
Data EngineeringCybersecurityPenetration TestingSOC OperationsIncident ResponseComplianceStakeholder ManagementAccountingExcelLeadershipCommunicationCollaborationPublic SpeakingInternal AuditCISSP

About the role

  • Overview Tract Capital adopts a unique approach to digital infrastructure investment.
  • Leveraging experience and strategic insights honed over three decades of creating successful companies in the space, we excel in nurturing and advancing leading-edge digital infrastructure enterprises.
  • Tract Capital has introduced two digital infrastructure strategies.

Responsibilities

  • Employees may perform other related duties to meet the organization's ongoing needs.

Requirements

  • Bachelor's degree in Information Security, Computer Science, Engineering, or related field.
  • 10+ years of progressive information security experience, with at least 5 years in a CISO, Deputy CISO, or equivalent senior security leadership role.
  • Deep working knowledge of ISO 27001, NIST 800-53, SOC 2 Type II, and demonstrated experience leading organizations through certification and audit processes.
  • Hands-on experience with Microsoft 365 security and compliance stack - Entra ID, Defender XDR, Purview (DLP, sensitivity labels, Insider Risk, Compliance Manager), Intune, and Conditional Access.
  • Experience with incident response planning, execution, and post-incident reporting in environments with investor and regulatory notification obligations.
  • Proven ability to communicate security posture and risk to executive leadership, boards, and institutional investors - including experience with investor ODD/DDQ processes.

Nice to have

  • Experience with critical infrastructure security, including OT/ICS environments (data centers, utilities, industrial).
  • Familiarity with ISO 42001 (AI Management System) or demonstrated experience establishing AI governance frameworks.
  • Experience supporting SEC-registered or SEC-exempt investment advisers and understanding of related compliance obligations.
  • Knowledge of REIT structures, fund accounting controls, and the security considerations unique to real estate private equity.
  • Experience with FedRAMP requirements as they relate to customer contractual obligations.
  • Advanced degree (MBA, MS in Cybersecurity, or equivalent).
  • Active certifications: CISSP, CISM, CISA, CRISC, or equivalent.
  • Ability to translate business strategy and growth trajectory into a scalable security program that enables, rather than constrains, the business.

Compensation

  • $275,000-$300,00 Base Salary + Discretionary Bonus Tract Capital Management offers a competitive total compensation package commensurate with experience, including base salary, annual performance bonus, and a comprehensive benefits program.
  • Tract Capital Employment Tract Capital employees enjoy competitive compensation and comprehensive benefits, including 100% employer-covered medical, dental, and vision insurance, a 401K program, standard paid holidays, and unlimited PTO.

Benefits

  • Competency Strategic Vision - Ability to translate business strategy and growth trajectory into a scalable security program that enables, rather than constrains, the business.
  • Qualified applicants are considered for employment regardless of age, race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or veteran status.

Company info

  • to support the growth of digital infrastructure.
  • Tract Capital goes beyond simple investment by acting as a strategic partner and catalyst for innovation within the sector.
  • We ensure our engagements not only generate strong financial results but also develop essential digital infrastructure to meet growing demands.
  • The first is a horizontal, powered land strategy focused on creating master planned data center campuses called Tract.
  • The second is the mega-campus vertical development strategy called Fleet Data Centers.
  • Position Overview The Chief Information Security Officer (CISO) is a senior leadership role responsible for establishing, maturing, and governing the enterprise information security program across Tract Capital Management and each of its individual investment strategies (Tract and Fleet Data Centers).
  • Reporting directly to the CITO, the CISO will own information security governance, compliance, risk management, and controls - ensuring that TCM's security posture satisfies the demands of institutional investors, hyperscale customers, regulatory bodies, and internal fiduciary obligations.
  • This is a hands-on leadership position that requires deep expertise in building information security programs within complex, multi-entity investment structures.
  • The CISO will work across corporate IT, operational technology (OT) environments, and third-party ecosystems to deliver a unified governance model that scales with TCM's rapid growth.
  • Job Responsibilities
  • The candidate will have experience and practical expertise in the following:
  • Information Security Governance Design and lead TCM's enterprise-wide Information Security Management System (ISMS) aligned to ISO/IEC 27001 and NIST 800-53, covering corporate IT and OT environments across all entities.
  • Establish and chair an Information Security Governance Committee with representation from TCM, Tract, and Fleet Data Centers - integrating into the existing risk committee structure chaired by the Chief Legal Officer (CLO).
  • Own the information security policy framework across all entities, including the Acceptable Use Policy, AI Policy, Access Control Policy, Data Classification & Handling, Incident Response, and supporting Fleet policies (0034-0039).
  • Drive the adoption and operationalization of ISO 27001 certification and ISO 42001 (AI Management System) across appropriate entities.
  • Present security posture, risk exposure, and program maturity to the ELT Steering Committee (SteerCo), Risk Committees, and the CITO on a regular cadence.
  • Serve as the authoritative voice on information security during investor operational due diligence (ODD) processes, responding to DDQs (e.g., Future Fund ORR, SIG questionnaires) and representing TCM's security posture to institutional investors.
  • Compliance & Regulatory Build and operate the information security compliance program spanning TCM corporation, Tract (land/development), and Fleet Data Centers (critical infrastructure) - recognizing the distinct regulatory and contractual obligations of each strategy.

Equal opportunity

  • Tract Capital is proud to be an Equal Opportunity Employer.
Apply directly at Tract Capital →Create a free account for alerts like thisView Tract Capital immigration profile

This listing is sourced directly from Tract Capital's careers page and normalized into a canonical job model.