Director of Information Security Engineering
About The Position
Leader Bank is seeking an experienced and hands-on Director of Information Security Engineering to serve as a senior leader within the Information Security organization. Reporting directly to the Head of Information Security, this role is responsible for designing, implementing, and operating enterprise security platforms and engineering capabilities while establishing and advancing the Bank's AI security strategy. The ideal candidate combines deep engineering expertise with strategic leadership and possesses the ability to architect secure AI solutions, evaluate emerging AI technologies, develop security controls, and guide teams through an evolving threat landscape. This individual must be equally comfortable leading strategic initiatives, mentoring technical teams, engaging with executive leadership, and serving as an active participant in incident response activities when required. As the designated backup to the Head of Information Security, this position provides leadership continuity, supports regulatory and audit engagements, and represents Information Security across technology, risk, and business functions.
Requirements
- Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or related field.
- 5+ years of progressive cybersecurity experience.
- 2+ years of leadership experience managing technical security teams.
- Strong engineering background with hands-on experience designing and implementing security solutions.
- Experience with cloud security platforms including Azure, AWS, and hybrid environments.
- Experience securing modern identity platforms, endpoint management solutions, application environments, APIs, and SaaS platforms.
- Demonstrated incident response leadership experience.
Nice To Haves
- Direct experience securing AI, Generative AI, Machine Learning, Agentic AI, or similar AI ecosystems.
- Experience implementing AI governance and AI risk management frameworks.
- Experience within banking, financial services, or other highly regulated industries.
- Knowledge of FFIEC, NIST CSF, ISO 27001, ISO 42001, and related cybersecurity standards.
- Preferred Certifications, one or more of: CISSP CCSP GIAC (GSEC, GCIH, GCIA, GMON, or similar) SABSA AWS Security Specialty Microsoft Cybersecurity Architect Expert (SC-100) Certified AI Security Practitioner (CAISP) or equivalent AI security certification
Responsibilities
- Lead the design, implementation, and continuous improvement of enterprise security architecture and engineering programs.
- Maintain security standards across cloud, network, endpoint, identity, application, and data security domains.
- Oversee the management of security technologies, including SIEM, EDR, IAM, DLP, vulnerability management, and cloud security platforms.
- Partner with infrastructure, cloud, and application teams to ensure security-by-design principles are incorporated into technology initiatives.
- Build scalable security controls that support both operational efficiency and regulatory compliance.
- Serve as the organization's technical leader for AI security architecture and AI risk management.
- Assist in designing security frameworks and technical guardrails for Generative AI, Machine Learning, Agentic AI, and emerging AI technologies.
- Evaluate security risks associated with AI platforms, models, agents, APIs, third-party AI vendors, and cloud AI services.
- Partner with business, technology, risk, and data teams to establish secure AI adoption practices.
- Develop controls for prompt security, data protection, model governance, AI monitoring, identity management, and secure AI deployment.
- Assess emerging AI threats, including prompt injection, model abuse, sensitive data disclosure, AI supply-chain risk, autonomous agent risk, and AI-enabled cyberattacks.
- Establish AI security architecture standards aligned with the Bank's AI Governance Framework.
- Serve as a senior escalation point during cybersecurity incidents and participate in incident command activities.
- Lead technical response efforts for significant security events and coordinate containment, eradication, recovery, and lessons learned activities.
- Support ongoing threat detection, threat hunting, and security monitoring initiatives.
- Ensure security engineering controls effectively support the Bank's incident response program and service level objectives.
- Participate in after-hours incident response activities when required.
- Lead, coach, and mentor security analysts, and other security team members.
- Foster a collaborative and high-performing team environment.
- Promote a culture of continuous learning, innovation, accountability, and operational excellence.
- Work effectively across technology, operations, risk management, compliance, internal audit, and business leadership teams.
- Maintain flexibility to shift between strategic leadership and hands-on technical execution based on organizational needs.
- Support regulatory examinations, audits, risk assessments, and management reporting activities.
- Translate regulatory requirements into technical security controls and implementation strategies.
- Assist in updating and developing security policies, standards, and procedures.
- Contribute to Board, executive, and committee reporting as requested.
- Act as the designated backup to the Chief Information Security Officer.
- Assist in developing security strategy, roadmaps, budgets, and operating plans.
- Provide leadership continuity during CISO absence.
Benefits
- 401k plan with corporate match
- medical and dental insurance
- health insurance coverage
- team member wellness program
- life and disability insurance
- a retirement savings plan
- paid holidays and paid time off and vacation
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
