Director, Information Technology & Security

This is a Fully Remote Job
About Our Client:
The organization operates within the financial services industry, preparing to launch as a de novo Industrial Loan Company (ILC). It addresses the challenge of establishing robust cybersecurity and information security frameworks that comply with FDIC and state regulatory requirements. The company focuses on protecting customer and institutional data while aligning its security programs with regulatory expectations and risk management frameworks.
About the Opportunity:
The DIRECTOR, INFORMATION TECHNOLOGY & SECURITY will lead the development and implementation of the organization's information security and cybersecurity programs. This role is critical in shaping the enterprise-wide security framework, ensuring compliance with regulatory standards, and integrating security measures across infrastructure and engineering. The position requires both strategic leadership and technical expertise to establish a scalable security posture from the ground up, significantly contributing to the organization's secure launch and ongoing operations.
Responsibilities:
Oversee infrastructure design and IT engineering
Develop and maintain a comprehensive Information Security Program consistent with FDIC guidance and interagency standards
Create and enforce policies and procedures for cybersecurity, data protection, and incident response
Align security initiatives with overall risk management and governance frameworks
Report to executive management and the Board on security posture and risk mitigation
Lead the technical build phase, focusing on cloud security and DevOps integration
Collaborate with engineering on secure technical architectures
Establish threat monitoring and detection capabilities
Implement layered security controls
Manage the Incident Response Program and coordinate with regulators
Maintain relationships with information-sharing groups and law enforcement
Evaluate third-party and affiliate service provider security
Oversee vendor due diligence, monitoring, and contractual security requirements
Coordinate with Operations, Compliance, and Internal Audit on third-party risks
Ensure compliance with privacy and data protection laws
Integrate privacy-by-design in new products and services
Assist in developing and testing Business Continuity and Disaster Recovery plans
Prepare technology and security programs for de novo application and regulatory examinations
Promote a culture of security awareness and lead security training
Build and lead a security team
Requirements:
Minimum 10 years of experience in information technology, security, and technology risk management
Proven experience designing and implementing information security programs compliant with FDIC and FFIEC standards
Strong knowledge of third-party risk frameworks and financial services cybersecurity expectations
Experience leading incident response, penetration testing, and security operations in cloud and hybrid environments
Pay Range and Compensation Package:
The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.
Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.

Work arrangement
Yes