Director, Information Technology & Security

This is a Fully Remote Job About Our Client:The organization operates within the financial services industry, preparing to launch as a de novo Industrial Loan Company (ILC). It addresses the challenge of establishing robust cybersecurity and information security frameworks that comply with FDIC and state regulatory requirements. The company focuses on protecting customer and institutional data while aligning its security programs with regulatory expectations and risk management frameworks. About the Opportunity:The DIRECTOR, INFORMATION TECHNOLOGY & SECURITY will lead the development and implementation of the organization's information security and cybersecurity programs. This role is critical in shaping the enterprise-wide security framework, ensuring compliance with regulatory standards, and integrating security measures across infrastructure and engineering. The position requires both strategic leadership and technical expertise to establish a scalable security posture from the ground up, significantly contributing to the organization's secure launch and ongoing operations. Responsibilities:Oversee infrastructure design and IT engineeringDevelop and maintain a comprehensive Information Security Program consistent with FDIC guidance and interagency standardsCreate and enforce policies and procedures for cybersecurity, data protection, and incident responseAlign security initiatives with overall risk management and governance frameworksReport to executive management and the Board on security posture and risk mitigationLead the technical build phase, focusing on cloud security and DevOps integrationCollaborate with engineering on secure technical architecturesEstablish threat monitoring and detection capabilitiesImplement layered security controlsManage the Incident Response Program and coordinate with regulatorsMaintain relationships with information-sharing groups and law enforcementEvaluate third-party and affiliate service provider securityOversee vendor due diligence, monitoring, and contractual security requirementsCoordinate with Operations, Compliance, and Internal Audit on third-party risksEnsure compliance with privacy and data protection lawsIntegrate privacy-by-design in new products and servicesAssist in developing and testing Business Continuity and Disaster Recovery plansPrepare technology and security programs for de novo application and regulatory examinationsPromote a culture of security awareness and lead security trainingBuild and lead a security team Requirements:Minimum 10 years of experience in information technology, security, and technology risk managementProven experience designing and implementing information security programs compliant with FDIC and FFIEC standardsStrong knowledge of third-party risk frameworks and financial services cybersecurity expectationsExperience leading incident response, penetration testing, and security operations in cloud and hybrid environments Pay Range and Compensation Package:The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors. Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin. Note:TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.