Senior Director – Information Security

🔥 12 hours ago

🇺🇸 United States – Remote

💵 $236.5k - $267.8k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

U.S. Financial Technology

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2014

💳 Fintech

☁️ SaaS

🤝 B2B

Fintech • SaaS • B2B

U. S. Financial Technology is the largest and most technologically advanced mortgage securitization platform in the U. S. , operating the Common Securitization Platform for Fannie Mae and Freddie Mac. It manages issuance and administration of Single-Family Mortgage-Backed Securities (SF MBS / UMBS), centrally houses loan- and pool-level data in a 100% cloud-based platform, and provides near real-time reporting, analytics, and operational services to support lenders, GSEs, and investors. The company emphasizes data management, risk and cybersecurity, and enabling liquidity in the primary mortgage market to facilitate home purchases and refinances.

📋 Description

• Lead the overall design of cybersecurity architecture, cybersecurity engineering, and business architecture • Ensure organizational compliance with internal and external cybersecurity policies • Contribute to the overall security vision and strategy • Improve operational efficiencies and reliability within the cybersecurity tools ecosystem in a cloud-native environment • Lead day-to-day management and execution of cybersecurity architecture and engineering functions across all divisions • Partner with business leaders to identify opportunities and risks and develop solutions supporting U.S. FinTech’s mortgage securitization platform • Design and implement company-wide cybersecurity architecture and engineering with second and third lines of defense • Develop cybersecurity patterns enabling secure application design and development • Manage external assessment activities and synthesize results into senior-level presentations • Advise business, technology, and security teams on cyber risk management and information security best practices • Serve as ambassador and senior technical advisor for enterprise cybersecurity • Develop and refine standards with Engineering, Infrastructure, Application Development, and Data teams • Monitor threat vectors and the cloud security tools ecosystem • Prototype new security tools and technologies and optimize or consolidate existing tools • Oversee deployment, integration, and initial configuration of new cybersecurity solutions and enhancements • Lead knowledge-sharing initiatives across cybersecurity, technology, and business teams • Create and maintain information security program performance metrics and communicate them to IT leadership • Lead the identity and access management program, including identity lifecycle management, access governance, privileged access, and authentication controls

🎯 Requirements

• Bachelor’s degree or higher in related discipline • Industry certification required, e.g. CISSP, CISA, CISM or equivalent designation • Minimum 12 years of experience building and leading global cybersecurity programs • Minimum 5 years leading Security Architecture and Engineering Teams • Must be authorized to work in the US without requiring employer sponsorship currently or in the future • Strong working knowledge of Cyber Security Architectural and Engineering principles supporting Cyber Defense, Compliance, Perimeter Security, Data Protection, Application Security, Operating System Security, Virtual Infrastructure, and Storage Protection • Strong understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), FIDO2/WebAuthn, and multifactor authentication (MFA) • Working knowledge of physical security • Experience adopting Zero Trust • Strong working knowledge of DevSecOps • Strong working knowledge of AWS and cloud-support tools • Strong working knowledge of Private Cloud, Public Cloud, and/or Hybrid Cloud • Experience with Risk, Security, or Audit frameworks including COBIT, COSO, ISO 27001/2, NIST 800-53, NIST CSF, AICPA, and BITS • Experience in technical control testing aligned to NIST 800-53, FISMA, and SOC • Strong analytical skills for identifying, evaluating, and mitigating enterprise risks • Experience using and managing Risk Management tools desired • Strong working experience with Microsoft Office Suite and GRC tools • Ability to document and explain risks and vulnerabilities to business and technical stakeholders • Ability to influence peers and management and work cross-functionally • Strong oral and written communication skills and ability to work collaboratively in a complex, fast-paced environment

🏖️ Benefits

• Performance bonus • 401k match • Healthcare coverage • PTO • Broad range of other benefits