Vice President, Infrastructure and Security

About the role

We're hiring a Vice President, Infrastructure and Security to own and elevate our infrastructure strategy and security program at FloatMe. This role is an exciting opportunity for a security leader looking to grow into a CISO position. The ideal candidate should be very hands-on, not just a “policy manager”. We need someone who can sit in a compliance review one hour and be configuring security tooling themselves the next.

Infrastructure

• Stewardship over infrastructure including individual computer hardware, office infrastructure, cloud infrastructure, code security and infrastructure, app architecture and security, AI security, and critical partnerships architectures.

Security

• Expertise in securing all of the above areas.
• Help pursue SOC2 compliance and maintain the highest security for users and staff.
• Own the security roadmap, compliance certifications, partner security reviews, and day-to-day technical operations that keep members’ data safe.

Hands-On Required

• Flexibility to switch gears between tactical execution and strategic planning.
• Reports to the SVP of Engineering.

What You’ll Do

• Steer the architecture of Cloud, Device, Code, App, AI, and Network infrastructure with a mind for security-first designs and plans.
• Set the direction for staff regarding infrastructure design, security, integrations, and partnerships (IT, Data, and Security).
• Serve as the primary security point of contact for bank and fintech partners, completing security questionnaires, third-party risk assessments, and due diligence requests.
• Own the SOC 2 Type II program end-to-end, including scoping, control design, evidence collection, and auditor management.
• Maintain and strengthen compliance posture across GLBA, PCI DSS, and other applicable financial services regulatory frameworks.
• Manage and improve core security infrastructure: SIEM, EDR, WAF, IAM, secrets management, and vulnerability scanning tools.
• Conduct or manage regular penetration testing and vulnerability assessments, and drive remediation to closure.
• Lead incident response efforts — including hands-on triage, containment, forensics, post-incident review, and breach notification processes.
• Build and run security awareness training and phishing simulations across the company.
• Review and negotiate security requirements in partner and vendor contracts.
• Partner cross-functionally with Product, Engineering, Finance, and Legal to embed security into everything built.
• Develop and maintain a multi-year security roadmap and report security posture and risk to executive leadership.

Who You Are

• A driver and an “owner” who makes plans, seeks buy-in, proposes alternatives, and drives projects to completion.
• A hands-on and self-driven security leader comfortable writing detection rules in a SIEM and presenting risk to the board.
• A compliance expert with deep, practical experience leading SOC 2 audits and navigating financial services frameworks like GLBA and PCI DSS.
• A skilled communicator who can translate complex technical risk into plain language for bank partners, executives, and non-technical teammates.
• A builder and operator energized by building and improving things, not just inheriting them.
• A collaborative team player who works closely with engineering, product, and compliance without becoming a blocker.
• Passionate about fintech and the unique security and compliance landscape of consumer financial products.

Who You Are Not

• An auditor or “paper pusher” — you must help decide and implement the security posture yourself.
• A recreational player — you must be hungry, competitive, and an impact player who truly “covers” this area.

Requirements

• 10+ years’ of progressive experience in information security, with at least 2 years in a senior IC or leadership role.
• Prior leadership experience in a role adjacent to “VP of Infrastructure and Security” preferred.
• Demonstrated hands-on experience leading SOC 2 Type I/II audits from scoping through certification.
• Practical knowledge of GLBA, PCI DSS, and other financial services compliance requirements.
• Direct experience managing bank partner or enterprise security reviews (e.g., SIG, CAIQ, VSA questionnaires).
• Proficiency with cloud security (AWS and Cloudflare preferred), including IAM, VPCs, CloudTrail, GuardDuty, or equivalents.
• Hands-on experience with penetration testing methodologies or managing third-party pen test engagements.
• Strong working knowledge of SIEM, EDR, vulnerability management, and secrets management tooling.
• Experience building and running an incident response program, including playbooks and tabletop exercises.
• Excellent written and verbal communication skills — able to explain technical risk to non-technical stakeholders.
• Experience in fintech, neobank, lending, or another consumer financial services environment strongly preferred.
• CISSP, CISM, CISA, or equivalent certification are a plus.
• Bonus points for willingness and capability to:
  • Read and review, or automate the review of server-side code for security (Golang)
  • Read and review, or automate the review of app-side code for security (Flutter)

Pay

Compensation Range: $200K - $250K