SalariesSign in
AboutPrivacyTerms
Senior Director of Information Security
Common Securitization Solutions

Senior Director of Information Security

United StatesRemoteFull-time
Pay Range: $237k - $268k / annual
Posted Sep 16
Apply

Job Description

OVERVIEW

The Company

U.S. Financial Technology (U.S. FinTech) is seeking an experienced Senior Director of Information Security to join our team of talented professionals. This is a full-time remote opportunity.

U.S. FinTech built and operates the largest and most advanced mortgage securitization platform in the world, supporting the Uniform Mortgage-Backed Security (UMBS) of Fannie Mae and Freddie Mac.

Supporting 70% of the mortgage-backed securities in the market, U.S. FinTech provides best-in-class single-family issuance, bond administration, disclosure, and tax services. We support a broad portfolio of products for our clients with full lifecycle management.

Our market-leading, cloud-based, end-to-end platform executes transactions on an extraordinary scale which has bolstered liquidity in the secondary mortgage market, one of the largest and most important financial markets in the world. Our unique approach to securitization combines the best minds in financial services with the know-how, flexibility, and innovation of leading technologists.

RESPONSIBILITIES

Job Information

The Senior Director of Information Security will lead the overall design of cyber security architecture, cyber security engineering and business architecture to ensure that the organization is compliant to cyber security policies both internally and externally. This position will contribute to the overall security vision and strategy.  The focus will be on improving operational efficiencies and reliability within U.S. FinTech’s Cyber Security tools ecosystem while continuing the teams to work in an increasingly cloud native environment as we are completely cloud based.  This position will lead day-to-day management and execution of Cyber security architecture and engineering functions across all divisions.  This position will interface with IT professionals as well as leaders of the business to assess and manage cyber risk, share the security vision, and solicit involvement in achieving higher levels of enterprise security through information sharing and collaboration.  This is a successor type role for all across InfoSec's functional areas.

Key Job Functions

  • Partner with leaders across the business to identify opportunities and risks and develop solutions that support U.S. FinTech, a SaaS company serving as the critical backbone of the US mortgage finance industry.

  • Refine, design, and implement company-wide cyber security architecture and engineering in partnership with 2nd and 3rd lines of defense.

  • Develop cyber security patterns to enable developers to design and build applications with appropriate security controls.

  • Manage external assessment activities and synthesize information into senior level presentations.

  • Serves as a subject matter expert to internal business, technology, and security teams. Proactively advises on a range of cyber risk management activities and information security industry best practices.

  • Acts as an ambassador and senior technical advisor for enterprise cyber security while engaging with other senior technical leaders throughout the organization.

  • Develop and refine standards in partnership with Engineering, Infrastructure, Application Development, Data.

  • Maintain vigilance about current threat vectors and expertise of the ecosystem of cloud security-related tools.

  • Prototype new security tools and technologies based on organizational strategy and evolving threats while looking for opportunities to optimize, consolidate and manage out tools that no longer meet company needs.

  • Engage in ongoing communication with peers in the Infrastructure and Application Support groups as well as the business group to ensure understanding of security goals, to solicit feedback and foster cooperation.

  • Oversee deployment, integration, and initial configuration of all new cyber security solutions and enhancements to existing information security solutions in accordance with Information security policies, standards, and operational procedures.

  • Lead initiatives designed to share knowledge across cyber security, technology, and business teams. Identifies, recommends, coordinates, and delivers timely knowledge to support teams regarding technologies, processes, or tools.

  • Create and maintain a set of metrics to document and measure the performance and effectiveness of the Information Security program; responsible for communicating metrics to IT Leadership Team.
  • Lead the organization's identity and access management program, including identity lifecycle management, access governance, privileged access, and authentication controls.

QUALIFICATIONS

Education

  • Bachelor’s degree or higher in related discipline. Advanced degrees (MS, PhD) strongly preferred.
  • Industry Certification required, e.g. CISSP, CISA, CISM or equivalent designation.

Minimum Experience

  • A minimum of 12 years of experience building and leading global cybersecurity programs.
  • A minimum of 5 of years leading Security Architecture and Engineering Teams.
  • Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future. U.S. FinTech does not offer sponsorship for this position.

Specialized Knowledge & Skills

  • Strong working knowledge of Cyber Security Architectural and Engineering principles supporting Cyber Defense, Compliance, Perimeter Security, Data Protection, Application Security, Operating System Security, Virtual Infrastructure, Storage Protection.

  • Strong understanding of modern authentication and identity protocols, including SAML, OAuth 2.0, OpenID Connect. (OIDC), FIDO2/WebAuthn, and Multi factor authentication (MFA).
  • Working knowledge of physical security.

  • Experience adopting Zero Trust.

  • Strong working knowledge of DevSecOps.

  • Strong working knowledge of AWS and tools to support the Cloud.

  • Strong working knowledge of Private Cloud, Public Cloud, and/or Hybrid Cloud.

  • Self-starter; adaptable to change; motivated to set personal and program goals and proactively track performance against goals.

  • Experience working with Risk, Security or Audit frameworks (i.e., COBIT, COSO, ISO 27001/2, NIST 800-53, NIST CSF,  AICPA, BITS).

  • Serve as subject matter expert for InfoSec and IT Security related topics with experience in technical control testing aligned to NIST 800-53, FISMA, and SOC. 

  • Possesses strong analytical skills capable of identifying, evaluating and mitigating significant risks within an enterprise.

  • Demonstrated experience using and managing Risk Management tools is desired.

  • Strong working experience with Microsoft Office Suite and GRC tools.

  • Secondary mortgage market or equivalent financial services experience is an advantage.

  • Ability to document and explain risks and vulnerabilities to both business and technical stakeholders.

  • Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.

  • Strong oral and written communication skills and ability to work well with others and in a collaborative, complex and fast paced environment.

Pay Range $236,500 to $267,750

U.S. FinTech's pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) a candidate’s qualifications, skills, competencies, and experience, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. U.S. FinTech offers a competitive total compensation package, which includes a performance bonus, 401k match, healthcare coverage, PTO, and a broad range of other benefits.

Employment

As a condition of employment with U.S. Financial Technology, any successful job applicant will be required to successfully complete a background investigation, which may also include a credit check for positions in some areas of our business.

U.S. Financial Technology is an Equal Opportunity Employer.

#

Originally posted on Himalayas

View job

Security Architect

SQA Solution

  • United States
  • Remote
  • Full-time
Apply
17 hrs ago
View job
W

Technical Escalation & Incident Response Engineer

Wiz

  • New York City
Apply
Added 18 hrs ago
View job
S

Security Engineer, Bridge

Stripe

  • Luxembourg
Apply
Added 18 hrs ago
View job
O

Staff Product Security Engineer, Offensive Security Team

Okta

  • Dublin, Ireland
Apply
Added 18 hrs ago
View job
H

Manager, Security Operations Center

Huntress

  • United States of America
Apply
Added 18 hrs ago
View job
E

Senior Solution Architect Security Specialist

Elastic

  • Tokyo, Japan
Apply
Added 18 hrs ago
View job

Head of Information Security & Enterprise Risk Management

Filinvest Group

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Director of Security Operations

National Debt Relief, LLC.

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

System and Security Engineer

IT Support Guy

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Senior Cybersecurity Project Manager – Security Tool Rationalization & Transform

Axiom Path

  • United States
  • Remote
  • Contract
Apply
19 hrs ago
View job
A

Consultant - Penetration Testing/Ethical Hacking (all genders)

Alice&Bob.Company

  • United States
  • Remote
  • Full-time
Apply
19 hrs ago
View job

AI Security Architect – Generative AI, LLM Security & AI Gateway Controls

Axiom Path

  • United States
  • Remote
  • Contract
Apply
19 hrs ago
View job

Head of IT Compliance

Arrise

  • Poland
  • Remote
  • Full-time
Apply
20 hrs ago
View job

Clear Skye IAM Engineer

Lacuna Talent

  • United Kingdom
  • Remote
  • Full-time
Apply
20 hrs ago
View job

IAM Federation Services (Okta) Engineer

Lifelancer

  • United States
  • Remote
  • Full-time
Apply
20 hrs ago
View job

Chief Information Security Officer (CISO) — Insurance & Investments

TheHiveCareers

  • Grenada
  • Remote
  • Full-time
Apply
21 hrs ago
View job

Penetration Tester Internship

NullNetwork Solutions

  • United States
  • Remote
  • Internship
Apply
21 hrs ago
View job

Chief Risk Officer (CRO) – Retail Banking

TheHiveCareers

  • Virgin Islands, British
  • Remote
  • Full-time
Apply
21 hrs ago
View job

Professional Services Red Team Intern - Summer 2027 (Remote, GBR)

Crowdstrike

  • United Kingdom
  • Remote
  • Internship
Apply
22 hrs ago
View job

IT GRC Analyst

GB.540 Houlihan Lokey UK Limited

  • United Kingdom
  • Remote
  • Full-time
Apply
22 hrs ago
View job

Junior Privacy Advisor

Secify

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

AI Red Team Specialist - Remote | Upto $22/hr

mercor

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

Chief Information Security Officer (CISO) — Insurance & Investments

TheHiveCareers

  • Saint Vincent and the Grenadines
  • Remote
  • Full-time
Apply
1 day ago
View job

Director, Product Manager - Managed Security Services

VikingCloud

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

Cybersecurity Architect

Lifelancer

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

Security Support Specialist, Wirespeed

Coalition

  • United Kingdom
  • Remote
  • Full-time
Apply
1 day ago
View job

Communications Security Custodian (COMSEC) - Remote

F3EA, Inc.

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

Cyber Security Analyst / Security Engineer

Elfonze Technologies

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

Cybersecurity Intern

IT Support Guy

  • United States
  • Remote
  • Internship
Apply
1 day ago
View job

Software Engineer - Security

Board Intelligence

  • United Kingdom
  • Remote
  • Full-time
Apply
1 day ago
Page 1 of 127Next
Common Securitization Solutions

Senior Director of Information Security

United StatesRemoteFull-time
Pay Range: $237k - $268k / annual
Posted Sep 16
Apply

Job Description

OVERVIEW

The Company

U.S. Financial Technology (U.S. FinTech) is seeking an experienced Senior Director of Information Security to join our team of talented professionals. This is a full-time remote opportunity.

U.S. FinTech built and operates the largest and most advanced mortgage securitization platform in the world, supporting the Uniform Mortgage-Backed Security (UMBS) of Fannie Mae and Freddie Mac.

Supporting 70% of the mortgage-backed securities in the market, U.S. FinTech provides best-in-class single-family issuance, bond administration, disclosure, and tax services. We support a broad portfolio of products for our clients with full lifecycle management.

Our market-leading, cloud-based, end-to-end platform executes transactions on an extraordinary scale which has bolstered liquidity in the secondary mortgage market, one of the largest and most important financial markets in the world. Our unique approach to securitization combines the best minds in financial services with the know-how, flexibility, and innovation of leading technologists.

RESPONSIBILITIES

Job Information

The Senior Director of Information Security will lead the overall design of cyber security architecture, cyber security engineering and business architecture to ensure that the organization is compliant to cyber security policies both internally and externally. This position will contribute to the overall security vision and strategy.  The focus will be on improving operational efficiencies and reliability within U.S. FinTech’s Cyber Security tools ecosystem while continuing the teams to work in an increasingly cloud native environment as we are completely cloud based.  This position will lead day-to-day management and execution of Cyber security architecture and engineering functions across all divisions.  This position will interface with IT professionals as well as leaders of the business to assess and manage cyber risk, share the security vision, and solicit involvement in achieving higher levels of enterprise security through information sharing and collaboration.  This is a successor type role for all across InfoSec's functional areas.

Key Job Functions

  • Partner with leaders across the business to identify opportunities and risks and develop solutions that support U.S. FinTech, a SaaS company serving as the critical backbone of the US mortgage finance industry.

  • Refine, design, and implement company-wide cyber security architecture and engineering in partnership with 2nd and 3rd lines of defense.

  • Develop cyber security patterns to enable developers to design and build applications with appropriate security controls.

  • Manage external assessment activities and synthesize information into senior level presentations.

  • Serves as a subject matter expert to internal business, technology, and security teams. Proactively advises on a range of cyber risk management activities and information security industry best practices.

  • Acts as an ambassador and senior technical advisor for enterprise cyber security while engaging with other senior technical leaders throughout the organization.

  • Develop and refine standards in partnership with Engineering, Infrastructure, Application Development, Data.

  • Maintain vigilance about current threat vectors and expertise of the ecosystem of cloud security-related tools.

  • Prototype new security tools and technologies based on organizational strategy and evolving threats while looking for opportunities to optimize, consolidate and manage out tools that no longer meet company needs.

  • Engage in ongoing communication with peers in the Infrastructure and Application Support groups as well as the business group to ensure understanding of security goals, to solicit feedback and foster cooperation.

  • Oversee deployment, integration, and initial configuration of all new cyber security solutions and enhancements to existing information security solutions in accordance with Information security policies, standards, and operational procedures.

  • Lead initiatives designed to share knowledge across cyber security, technology, and business teams. Identifies, recommends, coordinates, and delivers timely knowledge to support teams regarding technologies, processes, or tools.

  • Create and maintain a set of metrics to document and measure the performance and effectiveness of the Information Security program; responsible for communicating metrics to IT Leadership Team.
  • Lead the organization's identity and access management program, including identity lifecycle management, access governance, privileged access, and authentication controls.

QUALIFICATIONS

Education

  • Bachelor’s degree or higher in related discipline. Advanced degrees (MS, PhD) strongly preferred.
  • Industry Certification required, e.g. CISSP, CISA, CISM or equivalent designation.

Minimum Experience

  • A minimum of 12 years of experience building and leading global cybersecurity programs.
  • A minimum of 5 of years leading Security Architecture and Engineering Teams.
  • Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future. U.S. FinTech does not offer sponsorship for this position.

Specialized Knowledge & Skills

  • Strong working knowledge of Cyber Security Architectural and Engineering principles supporting Cyber Defense, Compliance, Perimeter Security, Data Protection, Application Security, Operating System Security, Virtual Infrastructure, Storage Protection.

  • Strong understanding of modern authentication and identity protocols, including SAML, OAuth 2.0, OpenID Connect. (OIDC), FIDO2/WebAuthn, and Multi factor authentication (MFA).
  • Working knowledge of physical security.

  • Experience adopting Zero Trust.

  • Strong working knowledge of DevSecOps.

  • Strong working knowledge of AWS and tools to support the Cloud.

  • Strong working knowledge of Private Cloud, Public Cloud, and/or Hybrid Cloud.

  • Self-starter; adaptable to change; motivated to set personal and program goals and proactively track performance against goals.

  • Experience working with Risk, Security or Audit frameworks (i.e., COBIT, COSO, ISO 27001/2, NIST 800-53, NIST CSF,  AICPA, BITS).

  • Serve as subject matter expert for InfoSec and IT Security related topics with experience in technical control testing aligned to NIST 800-53, FISMA, and SOC. 

  • Possesses strong analytical skills capable of identifying, evaluating and mitigating significant risks within an enterprise.

  • Demonstrated experience using and managing Risk Management tools is desired.

  • Strong working experience with Microsoft Office Suite and GRC tools.

  • Secondary mortgage market or equivalent financial services experience is an advantage.

  • Ability to document and explain risks and vulnerabilities to both business and technical stakeholders.

  • Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.

  • Strong oral and written communication skills and ability to work well with others and in a collaborative, complex and fast paced environment.

Pay Range $236,500 to $267,750

U.S. FinTech's pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) a candidate’s qualifications, skills, competencies, and experience, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. U.S. FinTech offers a competitive total compensation package, which includes a performance bonus, 401k match, healthcare coverage, PTO, and a broad range of other benefits.

Employment

As a condition of employment with U.S. Financial Technology, any successful job applicant will be required to successfully complete a background investigation, which may also include a credit check for positions in some areas of our business.

U.S. Financial Technology is an Equal Opportunity Employer.

#

Originally posted on Himalayas