Senior Information Security Engineer

Ninth Wave • New York, NY

8d • Onsite

About The Position

Ninth Wave is seeking a Senior Information Security Engineer to operate and mature its information security program. The role will establish, lead, and maintain an Information Security Management program of policies, procedures, and systems that manage risks to the company and its customers. The engineer will serve as an information security subject matter expert and implement security compliance processes and procedures.

The role will maintain Ninth Wave’s SOC 2 Type 2 and PCI-DSS compliance while expanding the use of standards such as NIST, CIS, and ISO 27001. It will also serve as the point person for information security calls with clients and help complete client due diligence requests. The position is five days a week on site in New York City and is a full-time opportunity.

Requirements

• 10 years of experience managing or leading information security functions.
• Experience managing information security control standards, including SOC 2, PCI-DSS, NIST CSF, and ISO 27001.
• Experience working with products or businesses in FinTech, banking, financial services, or other highly regulated sectors.
• Strong background in API-centric SaaS enterprise financial software.
• Consultative approach to security and ability to guide and educate developers on security best practices.
• Experience in security operations, incident response, and managing security incidents.
• Exceptional written and verbal communication skills.
• Bachelor’s degree in Computer Science or MIS.

Nice To Haves

• Relevant certifications such as CISSP, CISM, or CCSP; an advanced degree; or equivalent experience.

Responsibilities

• Maintain policies, processes, and procedures that protect the confidentiality, integrity, and availability of Ninth Wave’s data and services.
• Mature the information security program to continually discover, reassess, and mitigate security risks as the business, product, and customer landscape changes.
• Own cloud infrastructure security, security operations, application security, and governance, risk, and compliance (GRC).
• Maintain compliance with industry control standards, including SOC 2 Type 2 and PCI-DSS.
• Manage security across cloud infrastructure, including Amazon AWS and Microsoft Azure services.
• Serve as a technical mentor for security engineering.
• Manage technology diligence processes with customers and partners as the company scales.
• Partner with product management, software development, infrastructure, and operations teams to achieve confidentiality, integrity, and availability outcomes for products and services.
• Serve as the point person for information security calls with clients and help complete client due diligence requests.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior