Director, Information Security (Security Engineering & Operations)

Achieve is a leading digital personal finance company that helps everyday people move from struggling to thriving with innovative financial solutions. Role Overview Director, Information Security – You will be responsible for ensuring the security and integrity of our organization's systems, networks, and data. You will design, implement, and maintain robust security infrastructure and oversee day‑to‑day security operations. Responsibilities Leadership and Team Management: Develop and execute the company's information security strategy, aligning it with business goals and objectives. Establish and maintain relationships with internal stakeholders to foster a security‑aware culture. Provide executive‑level guidance on security measures and initiatives, ensuring they are integrated into the overall company strategy. Manage the information security budget effectively, allocating resources for key security projects and initiatives. Foster a collaborative and high‑performance culture within the team. Set clear objectives and goals for the team members and ensure they are aligned with the overall security strategy. Conduct regular performance evaluations, provide constructive feedback, and support professional development plans for team members. Recruit and onboard new team members as needed. Collaborate with Platform and Dev/Ops teams to ensure security best practices are being met. Security Engineering Management: Develop and execute a comprehensive security strategy, including the design and implementation of security infrastructure, policies, and procedures. Collaborate with cross‑functional teams to assess security risks and requirements/configurations for new technologies, systems, and services. Design and implement secure network architectures, including firewalls, intrusion detection systems, data encryption, and access controls. Ensure the effective deployment and configuration of security tools and technologies to protect critical assets. Oversee application security practices working closely with engineering teams, Dev/Ops and platform teams. Familiarity with detection engineering functions. Security Operations Management: Oversee the day‑to‑day security operations, monitoring systems, and responding to security incidents promptly. Lead oversight of the detection engineering and management of alerting and detections. Implement and manage security incident response functions and procedures; including investigation, containment, and resolution of security breaches. Create and maintain operational metrics. Manage relationships with MSSP and XDR providers. Develop and maintain security incident response plans, including coordination with internal stakeholders and external partners. Qualifications Proven experience (+5 years) in managing security engineering and operations in a complex IT environment. Bachelor's degree in Computer Science, Information Security, or a related field is desirable. Strong knowledge of security principles, practices, frameworks, and industry standards (e.g., ISO 27001, NIST, CIS). Extensive experience in designing and implementing security infrastructure; including firewalls, IDS/IPS, SIEM, endpoint protection, etc. Familiarity with cloud security principles and technologies (e.g., AWS, Azure, GCP). Strong leadership and team management skills, with the ability to inspire and motivate a diverse team. Strong communication and interpersonal skills, with the ability to collaborate effectively with cross‑functional teams. Relevant certifications (e.g., CISSP, CISM, GIAC) are highly desirable. Benefits 401(k) with employer match Medical, dental, and vision with HSA and FSA options Competitive vacation and sick time off, as well as dedicated volunteer days Access to wellness support through Employee Assistance Program, physical and mental health wellness programs Pet care discounts for your furry family members Financial support in times of hardship with our Achieve Care Fund A safe place to connect and a commitment to diversity and inclusion through our six employee resource groups All information will be kept confidential according to EEO guidelines. #J-18808-Ljbffr