Senior Information Security Engineer
About The Position
Ninth Wave is seeking a Senior Information Security Engineer to operate and mature its information security program. The role will implement security compliance processes and procedures and act as the subject matter expert for information security. The engineer will establish, lead, and maintain an Information Security Management program of policies, procedures, and systems to manage risks to Ninth Wave and its customers. The role will help maintain SOC 2 Type 2 and PCI-DSS compliance while expanding the use of standards such as NIST, CIS, and ISO 27001. The position also serves as the point person for information security calls with clients and helps complete client due diligence requests. This is a full-time role based on site five days a week in New York City.
Requirements
- 10 years of experience managing or leading information security functions.
- Experience managing information security control standards, including SOC 2, PCI-DSS, NIST CSF, and ISO 27001.
- Experience working with products or businesses in FinTech, banking, financial services, or other highly regulated sectors.
- Strong background in API-centric SaaS enterprise financial software.
- A consultative approach to security and the ability to guide and educate developers on security best practices.
- Experience in security operations, incident response, and managing security incidents.
- Exceptional written and verbal communication skills.
- Bachelor’s degree in Computer Science or MIS.
Nice To Haves
- Relevant certifications such as CISSP, CISM, or CCSP.
- Advanced degree or equivalent experience.
Responsibilities
- Maintain policies, processes, and procedures that protect the confidentiality, integrity, and availability of Ninth Wave’s data and services.
- Mature the information security program to continually discover, reassess, and mitigate security risks as the business, product, and customer landscape changes.
- Own cloud infrastructure security, security operations, application security, and GRC.
- Maintain compliance with industry control standards, including SOC Type 2 and PCI-DSS.
- Manage security across cloud infrastructure, including Amazon AWS and Microsoft Azure services.
- Serve as a technical mentor for security engineering.
- Manage technology diligence processes with customers and partners as the company scales.
- Partner with product management, software development, infrastructure, and operations to achieve confidentiality, integrity, and availability outcomes for Ninth Wave’s products and services.
- Serve as the point person on information security calls with clients and help complete client due diligence requests.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
