Remote job
Director, Information Technology & Security
Job details
About this role
Role overview
Establish and lead the information security and cybersecurity program for a new regulated bank. This executive role combines security governance and regulatory oversight with hands-on technical leadership, including building secure infrastructure and working closely with engineering as systems and operations take shape.
Responsibilities
- Create and maintain an information security program, policies, standards, and procedures aligned with applicable banking guidance and the institution’s risk framework. - Report security posture, emerging threats, and mitigation plans to executive leadership and the board. - Guide the technical build of infrastructure, including cloud security, DevOps integration, network design, encryption, and identity controls. - Establish threat monitoring and layered security controls; lead incident response and coordinate regulatory escalation when required. - Assess security risks from vendors and affiliates, setting due diligence, monitoring, and contractual expectations for providers handling sensitive data or critical services. - Protect customer information, incorporate privacy considerations into products, and coordinate continuity and recovery planning and exercises with risk partners.
Requirements
The available source does not provide a complete set of role-specific qualifications. It does indicate a need for expert knowledge of information security principles, frameworks, and regulatory requirements; strategic judgment with strong operational execution; clear communication across technical and business teams; and the ability to contribute directly to a technology build while managing executive and regulatory stakeholders.
Benefits and work setup
The listing describes the role as remote-first within the country of employment, with occasional office work possible and in-person onboarding. It also lists health coverage, monthly spending stipends, flexible time off, and possible equity rewards.