Senior Director of Information Security

U.S. Financial Technology•Remote,

1d•$236,500 - $267,750•Remote

About The Position

U.S. FinTech is seeking an experienced Senior Director of Information Security to join their team. This is a full-time remote opportunity. U.S. FinTech operates the largest mortgage securitization platform in the world, supporting the Uniform Mortgage-Backed Security (UMBS) of Fannie Mae and Freddie Mac. They provide best-in-class single-family issuance, bond administration, disclosure, and tax services for a broad portfolio of products. Their market-leading, cloud-based platform executes transactions on an extraordinary scale, bolstering liquidity in the secondary mortgage market. Their approach combines financial services expertise with technological innovation.

Requirements

Bachelor’s degree or higher in a related discipline.
Industry Certification required, e.g. CISSP, CISA, CISM or equivalent designation.
A minimum of 12 years of experience building and leading global cybersecurity programs.
A minimum of 5 years leading Security Architecture and Engineering Teams.
Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future.
Strong working knowledge of Cyber Security Architectural and Engineering principles supporting Cyber Defense, Compliance, Perimeter Security, Data Protection, Application Security, Operating System Security, Virtual Infrastructure, Storage Protection.
Strong understanding of modern authentication and identity protocols, including SAML, OAuth 2.0, OpenID Connect (OIDC), FIDO2/WebAuthn, and Multi factor authentication (MFA).
Working knowledge of physical security.
Experience adopting Zero Trust.
Strong working knowledge of DevSecOps.
Strong working knowledge of AWS and tools to support the Cloud.
Strong working knowledge of Private Cloud, Public Cloud, and/or Hybrid Cloud.
Self-starter; adaptable to change; motivated to set personal and program goals and proactively track performance against goals.
Experience working with Risk, Security or Audit frameworks (i.e., COBIT, COSO, ISO 27001/2, NIST 800-53, NIST CSF, AICPA, BITS).
Serve as subject matter expert for InfoSec and IT Security related topics with experience in technical control testing aligned to NIST 800-53, FISMA, and SOC.
Possesses strong analytical skills capable of identifying, evaluating and mitigating significant risks within an enterprise.
Strong working experience with Microsoft Office Suite and GRC tools.
Ability to document and explain risks and vulnerabilities to both business and technical stakeholders.
Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.
Strong oral and written communication skills and ability to work well with others and in a collaborative, complex and fast paced environment.

Nice To Haves

Advanced degrees (MS, PhD) strongly preferred.
Demonstrated experience using and managing Risk Management tools is desired.
Secondary mortgage market or equivalent financial services experience is an advantage.

Responsibilities

Lead the overall design of cyber security architecture, cyber security engineering and business architecture to ensure compliance with cyber security policies.
Contribute to the overall security vision and strategy, focusing on improving operational efficiencies and reliability within the Cyber Security tools ecosystem in a cloud-native environment.
Lead day-to-day management and execution of Cyber security architecture and engineering functions across all divisions.
Interface with IT professionals and business leaders to assess and manage cyber risk, share the security vision, and solicit involvement in achieving higher levels of enterprise security.
Partner with leaders across the business to identify opportunities and risks and develop solutions.
Refine, design, and implement company-wide cyber security architecture and engineering in partnership with 2nd and 3rd lines of defense.
Develop cyber security patterns to enable developers to design and build applications with appropriate security controls.
Manage external assessment activities and synthesize information into senior level presentations.
Serve as a subject matter expert to internal business, technology, and security teams, advising on cyber risk management and information security best practices.
Act as an ambassador and senior technical advisor for enterprise cyber security.
Develop and refine standards in partnership with Engineering, Infrastructure, Application Development, Data.
Maintain vigilance about current threat vectors and expertise of the ecosystem of cloud security-related tools.
Prototype new security tools and technologies, optimizing and consolidating existing tools.
Engage in ongoing communication with peers in Infrastructure, Application Support, and business groups to ensure understanding of security goals and foster cooperation.
Oversee deployment, integration, and initial configuration of all new cyber security solutions and enhancements.
Lead initiatives designed to share knowledge across cyber security, technology, and business teams.
Create and maintain a set of metrics to document and measure the performance and effectiveness of the Information Security program.
Lead the organization's identity and access management program, including identity lifecycle management, access governance, privileged access, and authentication controls.