Technical Lead - InfoSec & AI Platform
About The Position
DingoBlu is scaling from pre-launch build-out into a live, regulated neo bank, and its security, AI, and platform foundations need an owner who can run independently. This role formalizes work already underway: the InfoSec program, our emerging AI stack and AI adoption across the company, and the platform/integration architecture connecting DingoBlu to its providers. You’ll report to the Technical Program Director as the technical owner driving the roadmap — not the analyst executing someone else’s checklist. Information security remains the core of the role; AI strategy and platform architecture are extensions of that mandate. Most of DingoBlu’s AI and platform decisions carry security and compliance implications, and this role is where those threads meet.
Requirements
- 8+ years in a technical role spanning security, cloud/platform engineering, or software delivery, with hands-on ownership of a security or compliance function
- Demonstrated experience turning ambiguous, fast-moving requirements into documented, adoptable policy and process
- Working fluency in AWS (IAM, logging, security tooling) and modern identity/endpoint stacks (SSO, EDR)
- Exposure to compliance frameworks (SOC 2, PCI-DSS, NIST CSF, ISO 27001), and genuine fluency adopting and governing AI tools and platforms
- Clear written and verbal communication — this role writes policy, presents tradeoffs to leadership, and partners daily with engineering
Nice To Haves
- Certifications: Security+, AWS certifications, or similar are a plus — DingoBlu supports pursuing relevant certifications on the job
- Operates independently — brings leadership options and recommendations, not just escalations
- Comfortable saying “here’s what’s missing”, and then building it
- Documents relentlessly, so nothing lives only in one person’s head
- Wants to keep building a security and technical leadership career, and sees DingoBlu as the place to do it
Responsibilities
- Own the InfoSec, AWS, and identity/endpoint security policy set — draft, review, and maintain with leadership and the external security partner
- Drive the compliance runway (SOC 2, PCI-DSS, NIST CSF) — gap analysis, audit-ready evidence, and the security/compliance work processes and tracking
- Own vendor and provider security review (third-party risk management) across identity, endpoint, network, and cloud tooling, including new-tool evaluation
- Define and drive identity, endpoint, and incident response operations — SSO, EDR, alert routing, triage and escalation
- Maintain the application/asset inventory and own the launch-readiness security checklist as scope and timeline evolve
- Lead the inventory and management of externally facing product documentation (privacy policy, terms, in-app legal/policy docs) to maintain compliance
- Own DingoBlu’s tiered AI stack strategy — broad usage, R&D tooling, governance/compliance platforms, cloud governance — and vet new AI tools against cost, security, and regulatory fit
- Design and evolve the AI Dev Pipeline (CI, security scanning, infra provisioning, AI-assisted development), identifying where guardrails are needed
- Draft and maintain the AI usage guideline, driving AI adoption across the teams
- Track AI-relevant regulatory developments in a regulated fintech environment and flag implications early
- Partner with engineering and product on integrations, APIs, and dev-pipeline architecture and methodology, bringing security and AI-governance judgment into design decisions
- Maintain visibility into the provider/vendor roadmap and translate it into a security- and compliance-aware technology roadmap
- Represent security, AI, and platform considerations in cross-functional planning with Ops, Product, and Tech, supporting launch and future releases
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
