Senior Director, Security & Compliance

inKind•Austin, TX

14h•Onsite

About The Position

inKind is transforming restaurant financing and customer engagement through an innovative fintech platform that provides restaurants with growth capital while helping consumers discover and enjoy dining experiences nationwide. As a technology-enabled financial platform operating at the intersection of payments, fintech, hospitality, and consumer experiences, security, privacy, and compliance are critical to our continued growth and success. We are seeking a strategic and hands-on Senior Director of Security & Compliance to build, scale, and lead the organization’s information security, compliance, governance, risk, and corporate IT functions.

Requirements

10+ years of progressive experience in security, compliance, IT, governance, or risk management.
Experience leading and developing people across security, compliance, or IT, with the depth to operate as a hands-on technical leader — breadth and capability matter more than the size of organizations previously managed.
Demonstrated success as a hands-on, player-coach leader in a lean or scaling environment — personally executing core security, compliance, and IT work while building the team to own it, rather than directing from above.
Proven experience owning compliance programs and audits, including SOC 2 and PCI DSS.
Experience presenting to executive leadership, auditors, and external stakeholders.
CISSP, CISM, CRISC, CCSP, or equivalent certifications.

Nice To Haves

Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field.
Experience in fintech, payments, financial services, or regulated industries.
Experience managing corporate IT and device management platforms (e.g., MDM).
Experience supporting high-growth startup or scale-up organizations.

Responsibilities

Develop and execute inKind’s enterprise security strategy, policies, standards, and operating procedures.
Lead security planning aligned with company growth, product expansion, and regulatory requirements.
Set enterprise security policy and standards that the product and engineering organizations build against.
Serve as a senior advisor to leadership on security, compliance, and risk matters.
Own the company’s compliance strategy and roadmap.
Lead audit readiness and certification programs, including: SOC 2, PCI DSS, Privacy programs, Vendor and third-party risk management, Regulatory compliance requirements.
Partner with Legal and Finance on governance and regulatory obligations.
Ensure compliance programs remain scalable as the business grows.
Oversee security operations, monitoring, vulnerability management, incident response, and threat detection.
Establish company-wide risk management and risk assessment programs.
Develop security metrics, executive dashboards, and reporting frameworks.
Lead incident response planning, tabletop exercises, and business continuity initiatives.
Manage third-party security reviews and vendor risk assessments.
Own corporate IT operations, including the internal IT team, endpoint and device management, internal systems, and helpdesk support.
Manage identity and access administration across corporate systems and SaaS applications.
Establish IT standards, device lifecycle and asset management, and operational service levels.
Ensure IT operations support a secure, productive workforce across the company’s office and distributed environments.
Partner with Engineering and Product to integrate security into the software development lifecycle and define secure development standards.
Provide governance, policy, and advisory oversight for cloud (AWS) security architecture and application security, with Engineering owning platform implementation.
Advise on threat modeling, secure architecture reviews, and security testing practices.
Ensure security requirements are represented throughout the product lifecycle.
Build and lead a high-performing IT, Security, & Compliance organization.
Hire, mentor, and develop security, compliance, and IT professionals.
Establish accountability frameworks and performance metrics.
Create a culture of security awareness and shared responsibility.