VP Information Security

Fairway Independent Mortgage Corporation•Madison, WI

9d•Hybrid

About The Position

As the VP of Information Security, you will be the primary architect of our enterprise security vision. This is a high-impact leadership role responsible for designing and executing a multi-year roadmap that seamlessly integrates robust risk management with our core business objectives. You will lead technical operations—from cloud architecture to incident response—while fostering a culture in which security is a shared responsibility across the organization. Join us in Madison! This hybrid role offers the best of both worlds: the focus of remote work combined with collaborative days at our HQ. Currently out of state? We provide relocation support to help you make the move to Wisconsin seamless.

Requirements

12+ years in Information Security, with at least 5 years in a senior leadership role overseeing enterprise-wide accountability for a mid-to-large organization (2,000+ users).
Advanced mastery of GLBA, FTC Safeguards Rule, and state privacy regulations within the financial services sector.
Deep hands-on experience building and maturing frameworks based on NIST CSF, ISO 27001, or CIS Controls.
Demonstrated expertise in cloud security architecture (Azure/AWS preferred), Zero Trust principles, and modern ransomware defense strategies.
Proven track record of successfully leading organizations through regulatory examinations and external audits.
CISSP certification (required).

Nice To Haves

Master’s Degree in Cybersecurity (preferred)

Responsibilities

Strategic Leadership: Develop and execute a multi-year security strategy aligned with global business goals and evolving regulatory landscapes.
Executive Partnership: Act as a key advisor to the Chief Privacy Officer, Chief Compliance Officer, and Legal team to align security controls with GLBA, FTC Safeguards, and state privacy laws.
Enterprise Risk & Reporting: Mature our security governance and provide executive-level reporting on risk exposure, remediation progress, and overall security posture.
Security Operations: Oversee threat detection, vulnerability management, and modern ransomware defense. Lead cross-functional incident response and tabletop exercises with executive stakeholders.
Cloud & Infrastructure: Establish secure architecture across IaaS, PaaS, and SaaS (Azure/AWS), embedding "Security by Design" into system operations and Identity & Access Management (IAM).
Third-Party Oversight: Lead the design and monitoring of third-party risk management (TPRM) programs, ensuring vendor contracts meet rigorous data protection standards.