Director of Cyber Security Architecture and Engineering Services

U.S. FinTech built and operates the largest and most advanced mortgage securitization platform in the world, supporting the Uniform Mortgage-Backed Security (UMBS) of Fannie Mae and Freddie Mac. Supporting 70% of the mortgage-backed securities in the market, U.S. FinTech provides best-in-class single-family issuance, bond administration, disclosure, and tax services. We support a broad portfolio of products for our clients with full lifecycle management. Our market-leading, cloud-based, end-to-end platform executes transactions on an extraordinary scale which has bolstered liquidity in the secondary mortgage market, one of the largest and most important financial markets in the world. Our unique approach to securitization combines the best minds in financial services with the know-how, flexibility, and innovation of leading technologists.

About the role

This is a full-time remote opportunity. The Director of Cybersecurity Architecture and Engineering Services will lead the overall design of cyber security architecture, cyber security engineering, and business architecture to ensure the organization is compliant with cyber security policies both internally and externally. This position will contribute to the overall security vision and strategy, focusing on improving operational efficiencies and reliability within U.S. FinTech’s Cyber Security tools ecosystem while transitioning teams to work in an increasingly cloud-native environment. The role involves day-to-day management and execution of cybersecurity architecture and engineering functions, interfacing with IT professionals and business leaders to assess and manage cyber risk.

Responsibilities

• Partner with leaders across the business to identify opportunities and risks and develop solutions that support U.S. FinTech, a SaaS company serving as the critical backbone of the US mortgage finance industry.
• Refine, design, and implement company-wide cyber security architecture and engineering in partnership with 2nd and 3rd lines of defense.
• Develop cyber security patterns to enable developers to design and build applications with appropriate security controls.
• Manage external assessment activities and synthesize information into senior-level presentations.
• Serve as a subject matter expert to internal business, technology, and security teams.
• Proactively advise on a range of cyber risk management activities and information security industry best practices.
• Act as an ambassador and senior technical advisor for enterprise cyber security while engaging with other senior technical leaders throughout the organization.
• Develop and refine standards in partnership with Engineering, Infrastructure, Application Development, and Data teams.
• Maintain vigilance about current threat vectors and expertise of the ecosystem of cloud security-related tools.
• Prototype new security tools and technologies based on organizational strategy and evolving threats while optimizing, consolidating, and managing out tools that no longer meet company needs.
• Engage in ongoing communication with peers in the Infrastructure and Application Support groups as well as the business group to ensure understanding of security goals, solicit feedback, and foster cooperation.
• Oversee deployment, integration, and initial configuration of all new cyber security solutions and enhancements to existing information security solutions in accordance with information security policies, standards, and operational procedures.
• Lead initiatives designed to share knowledge across cyber security, technology, and business teams.
• Identify, recommend, coordinate, and deliver timely knowledge to support teams regarding technologies, processes, or tools.
• Create and maintain a set of metrics to document and measure the performance and effectiveness of the Information Security program; responsible for communicating metrics to the IT Leadership Team.

Requirements

• Bachelor’s degree or higher in a related discipline.
• Industry Certification required, e.g., CISSP, CISA, CISM, or equivalent designation.
• Minimum of 10 years of experience building and leading cybersecurity programs.
• Minimum of 5 years leading Security Architecture and Engineering Teams.
• Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future.

Skills

• Strong working knowledge of Cyber Security Architectural and Engineering principles supporting Cyber Defense, Compliance, Perimeter Security, Data Protection, Application Security, Operating System Security, Virtual Infrastructure, and Storage Protection.
• Working knowledge of physical security.
• Experience adopting Zero Trust.
• Strong working knowledge of DevSecOps.
• Strong working knowledge of AWS and tools to support the Cloud.
• Strong working knowledge of Private Cloud, Public Cloud, and/or Hybrid Cloud.
• Self-starter; adaptable to change; motivated to set personal and program goals and proactively track performance against goals.
• Experience working with Risk, Security, or Audit frameworks (e.g., COBIT, COSO, ISO 27001/2, NIST 800-53, NIST CSF, AICPA, BITS).
• Serve as a subject matter expert for InfoSec and IT Security-related topics with experience in technical control testing aligned to NIST 800-53, FISMA, and SOC.
• Strong analytical skills capable of identifying, evaluating, and mitigating significant risks within an enterprise.
• Demonstrated experience using and managing Risk Management tools is desired.
• Strong working experience with Microsoft Office Suite and GRC tools.
• Secondary mortgage market or equivalent financial services experience is an advantage.
• Ability to document and explain risks and vulnerabilities to both business and technical stakeholders.
• Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.
• Strong oral and written communication skills and ability to work well with others in a collaborative, complex, and fast-paced environment.

Pay

Pay range for this job level is $208,500 to $235,750. Additional factors considered in extending an offer include (but are not limited to) a candidate’s qualifications, skills, competencies, and experience, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Benefits

• Competitive total compensation package, which includes a performance bonus and 401k match.
• Healthcare coverage.
• Paid time off (PTO).
• A broad range of other benefits.