Information Security Director

About the role

This leader will shape a resilient security program for a FinTech SaaS environment, partnering across the business to protect systems, data, and customer trust. The role combines strategic oversight with hands-on direction across compliance, security operations, and risk reduction in modern cloud-based platforms.

Responsibilities

• Lead the organization's information security function, setting priorities, policies, and controls that strengthen the overall security posture.
• Direct compliance efforts for key regulatory and customer-facing frameworks, including FedRAMP, PCI-related standards, and SOC assessments.
• Oversee security operations across Linux infrastructure, Kubernetes platforms, and Java-based applications to identify and reduce risk.
• Establish and refine processes for threat monitoring, incident response, and vulnerability remediation to improve readiness and resilience.
• Partner with engineering and platform teams to embed security practices into application development and cloud operations.
• Guide the evaluation and improvement of security tooling, including SIEM capabilities, to support visibility, detection, and response.
• Advise senior leadership on security risks, priorities, and program maturity through clear reporting and actionable recommendations.

Requirements

• Demonstrated success leading information security teams within a FinTech, SaaS, or similarly regulated technology environment.
• Strong experience managing compliance programs tied to FedRAMP, PCI standards, and SOC controls.
• Deep knowledge of securing Linux systems, Kubernetes environments, and Java microservices architectures.
• Expertise in threat intelligence, incident handling, and vulnerability management practices.
• Broad understanding of application security, enterprise security, and network security principles.
• Hands-on familiarity with SIEM platforms and security monitoring approaches.
• Ability to communicate technical risk and security strategy effectively to both executive and technical audiences.