[Hiring] Senior Director of Information Security @Common Securitization Solutions

Role Description

The Senior Director of Information Security will lead the overall design of cyber security architecture, cyber security engineering, and business architecture to ensure that the organization is compliant with cyber security policies both internally and externally. This position will contribute to the overall security vision and strategy, focusing on improving operational efficiencies and reliability within U.S. FinTech’s Cyber Security tools ecosystem while continuing to work in an increasingly cloud-native environment.

• Lead day-to-day management and execution of Cyber security architecture and engineering functions across all divisions.
• Interface with IT professionals and business leaders to assess and manage cyber risk, share the security vision, and solicit involvement in achieving higher levels of enterprise security.
• Partner with leaders across the business to identify opportunities and risks and develop solutions that support U.S. FinTech.
• Refine, design, and implement company-wide cyber security architecture and engineering in partnership with 2nd and 3rd lines of defense.
• Develop cyber security patterns to enable developers to design and build applications with appropriate security controls.
• Manage external assessment activities and synthesize information into senior-level presentations.
• Serve as a subject matter expert to internal business, technology, and security teams.
• Act as an ambassador and senior technical advisor for enterprise cyber security.
• Develop and refine standards in partnership with Engineering, Infrastructure, Application Development, and Data.
• Maintain vigilance about current threat vectors and expertise of cloud security-related tools.
• Prototype new security tools and technologies based on organizational strategy and evolving threats.
• Engage in ongoing communication with peers in the Infrastructure and Application Support groups.
• Oversee deployment, integration, and initial configuration of all new cyber security solutions.
• Lead initiatives designed to share knowledge across cyber security, technology, and business teams.
• Create and maintain a set of metrics to document and measure the performance and effectiveness of the Information Security program.
• Lead the organization's identity and access management program.

Qualifications

• Bachelor’s degree or higher in a related discipline.
• Advanced degrees (MS, PhD) strongly preferred.
• Industry Certification required, e.g., CISSP, CISA, CISM or equivalent designation.
• A minimum of 12 years of experience building and leading global cybersecurity programs.
• A minimum of 5 years leading Security Architecture and Engineering Teams.
• Applicants must be authorized to work in the US without requiring employer sponsorship.

Requirements

• Strong working knowledge of Cyber Security Architectural and Engineering principles.
• Strong understanding of modern authentication and identity protocols.
• Working knowledge of physical security.
• Experience adopting Zero Trust.
• Strong working knowledge of DevSecOps.
• Strong working knowledge of AWS and tools to support the Cloud.
• Self-starter; adaptable to change; motivated to set personal and program goals.
• Experience working with Risk, Security or Audit frameworks.
• Strong analytical skills capable of identifying, evaluating, and mitigating significant risks.
• Strong working experience with Microsoft Office Suite and GRC tools.
• Ability to document and explain risks and vulnerabilities to both business and technical stakeholders.
• Strong oral and written communication skills.

Benefits

• Competitive total compensation package.
• Performance bonus.
• 401k match.
• Healthcare coverage.
• PTO.
• A broad range of other benefits.