Director of Security, Risk

Job not on LinkedIn

🔥 4 minutes ago

🇺🇸 United States – Remote

💵 $200k - $260k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 18%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

SentiLink

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

🔐 Security

💳 Fintech

💸 Finance

💰 $70M Series B on 2021-08

Security • Fintech • Finance

SentiLink is a company that partners with leading financial institutions to tackle identity theft and fraud at the point of application. Their solutions incorporate expert analysis and machine learning models to identify and manage fraud effectively. SentiLink targets various types of fraud including synthetic, identity theft, and first-party fraud, and provides flexible integration options such as APIs to suit diverse customer needs. With a focus on data security and a customer-centric approach, SentiLink delivers real-time insights and solutions to financial institutions and fintech companies, enhancing their ability to approve legitimate customers while minimizing fraud.

📋 Description

• Lead and develop SentiLink's security governance, risk, and compliance organization • Manage and mentor security and compliance professionals and develop organizational and hiring plans • Own security compliance and audit programs, including FedRAMP, SOC 2, and PCI DSS • Lead external assessments, manage control effectiveness and evidence collection, oversee Vanta and compliance automation • Oversee FedRAMP continuous monitoring, POA&M governance, change-management compliance, agency-specific requirements, and assessment readiness • Establish and operate a rigorous security risk management program • Own identification, assessment, documentation, escalation, and treatment of security risks, control deficiencies, and exceptions • Lead third-party security risk management, vendor diligence, assessment quality, and ongoing vendor oversight • Lead customer and partner security assessments and audits • Evaluate contractual security requirements with Legal and coordinate technical responses • Own security policy and control governance and maintain policies, standards, and control frameworks • Develop accountability, measurable outcomes, repeatable processes, and automation • Identify emerging risks and requirements, communicate recommendations to leadership, and drive improvements across organizational boundaries • Report to SentiLink's security leader and collaborate with Security Engineering, Engineering, IT, Legal, Product, and business teams • Build a proactive, effective, and scalable security program that meaningfully reduces organizational risk

🎯 Requirements

• 10+ years of experience in information security, including significant experience leading security governance, compliance, assurance, or risk management programs • Demonstrated experience owning major security compliance and assurance programs such as FedRAMP, SOC 2, PCI DSS, or comparable regulatory frameworks • Direct engagement with auditors, assessors, and external stakeholders • Strong technical understanding of modern cloud infrastructure, SaaS application security, identity and access management, vulnerability management, and security architecture • Ability to independently evaluate technical findings, control designs, and remediation approaches • Proven ability to build and improve security programs, identify control gaps and emerging requirements, establish priorities, and translate security risks into actionable organizational plans • Experience managing and developing security professionals and leading programs across distributed teams • Experience with third-party risk assessments, customer security diligence, and security risk management • Ability to evaluate complex technical and contractual security requirements • Strong written and verbal communication skills, sound judgment, and ability to influence engineering teams, business leaders, auditors, and external stakeholders • This is a remote, US-based position • Must be legally authorized to work in the United States

🏖️ Benefits

• Employer paid group health insurance for you and your dependents • 401(k) plan with employer match • Flexible paid time off • Regular company-wide in-person events • Home office stipend • Equity

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume