Security Risk Management Lead

About Our Client:
The organization operates within the financial services industry, focusing on providing clear and predictable payment options without hidden fees. It emphasizes building secure, honest financial products and is advancing its Security Risk Management team from traditional governance and compliance toward an engineering-driven program that automates and scales security controls and workflows to protect the company and its customers.
About the Opportunity:
The SECURITY RISK MANAGEMENT LEAD is responsible for designing, developing, and implementing solutions to complex security challenges within the Third Party and broader Security Risk Management programs. This role transforms security risk management into a security engineering discipline by automating governance, risk, and compliance workflows, collaborating with stakeholders, and enhancing security controls to reduce risk and improve operational efficiency.
Responsibilities:
Lead and enhance the Security Third Party Program processes, controls, and workflows
Develop automation to replace manual governance, risk, and compliance tasks using Python and agentic coding tools
Design and manage workflow orchestration and system integrations
Collaborate with Procurement, Legal, Engineering, IT, Compliance, Privacy, and business teams to manage third party security risks
Translate complex security requirements into scalable program solutions
Identify and implement process automation opportunities
Establish repeatable processes, metrics, and reporting for program operational excellence
Assess third party security controls and cloud architectures and provide recommendations
Conduct threat modeling for high-risk integrations
Manage multiple security risk reviews and initiatives concurrently
Partner with technical teams to optimize security tools and automation
Develop dashboards and reporting to improve risk visibility and program performance
Serve as a trusted advisor on third party security risk management
Contribute to security risk management strategy and governance improvements
Requirements:
Minimum 5 years of experience in Information Security, Risk Management, or related fields
Proficient with agentic coding tools (e.g., Cursor, Claude) and Python scripting
Knowledge of cloud environments (AWS, GCP, Azure) and related security controls
Strong written and verbal communication skills
Familiarity with security and control frameworks such as NIST, ISO 2700x, SOC1&2, PCI DSS, etc.
Bachelor's degree in Information Security, Cybersecurity, Computer Science, or related field or equivalent experience
Attention to detail and experience with security tooling
Proven ability to drive projects to completion
Ability to communicate technical issues to non-technical audiences
Professional certifications (CISSP, CISM, CISA, CRISC) are a plus
Pay Range and Compensation Package:
USA Pacific base pay range per year: $165,000 - $225,000
USA Sapphire base pay range per year: $146,000 - $206,000
Benefits & Perks:
100% subsidized medical coverage including dental and vision for employees and dependents
Monthly stipends for health, wellness, and technology spending
Remote-first work environment with built-in flexibility
Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
RemoteHunter is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.

Work arrangement
Yes