Director, Information Technology & Security

This is a Fully Remote Job

About Our Client:

The organization operates within the financial services industry, preparing to launch as a de novo Industrial Loan Company (ILC). It addresses the challenge of establishing robust cybersecurity and information security frameworks that comply with FDIC and state regulatory requirements. The company focuses on protecting customer and institutional data while aligning its security programs with regulatory expectations and risk management frameworks.

About the Opportunity:

The DIRECTOR, INFORMATION TECHNOLOGY & SECURITY will lead the development and implementation of the organization's information security and cybersecurity programs. This role is critical in shaping the enterprise-wide security framework, ensuring compliance with regulatory standards, and integrating security measures across infrastructure and engineering. The position requires both strategic leadership and technical expertise to establish a scalable security posture from the ground up, significantly contributing to the organization's secure launch and ongoing operations.

Responsibilities:

• Oversee infrastructure design and IT engineering
• Develop and maintain a comprehensive Information Security Program consistent with FDIC guidance and interagency standards
• Create and enforce policies and procedures for cybersecurity, data protection, and incident response
• Align security initiatives with overall risk management and governance frameworks
• Report to executive management and the Board on security posture and risk mitigation
• Lead the technical build phase, focusing on cloud security and DevOps integration
• Collaborate with engineering on secure technical architectures
• Establish threat monitoring and detection capabilities
• Implement layered security controls
• Manage the Incident Response Program and coordinate with regulators
• Maintain relationships with information-sharing groups and law enforcement
• Evaluate third-party and affiliate service provider security
• Oversee vendor due diligence, monitoring, and contractual security requirements
• Coordinate with Operations, Compliance, and Internal Audit on third-party risks
• Ensure compliance with privacy and data protection laws
• Integrate privacy-by-design in new products and services
• Assist in developing and testing Business Continuity and Disaster Recovery plans
• Prepare technology and security programs for de novo application and regulatory examinations
• Promote a culture of security awareness and lead security training
• Build and lead a security team

Requirements:

• Minimum 10 years of experience in information technology, security, and technology risk management
• Proven experience designing and implementing information security programs compliant with FDIC and FFIEC standards
• Strong knowledge of third-party risk frameworks and financial services cybersecurity expectations
• Experience leading incident response, penetration testing, and security operations in cloud and hybrid environments

Pay Range and Compensation Package:

• The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.