Information Security Director

DescriptionWe are looking for an experienced Information Security Director to guide and elevate our security strategy. This leader will shape a resilient security program for a FinTech SaaS environment, partnering across the business to protect systems, data, and customer trust. The role combines strategic oversight with hands-on direction across compliance, security operations, and risk reduction in modern cloud-based platforms.Responsibilities:• Lead the organization’s information security function, setting priorities, policies, and controls that strengthen the overall security posture.• Direct compliance efforts for key regulatory and customer-facing frameworks, including FedRAMP, PCI-related standards, and SOC assessments.• Oversee security operations across Linux infrastructure, Kubernetes platforms, and Java-based applications to identify and reduce risk.• Establish and refine processes for threat monitoring, incident response, and vulnerability remediation to improve readiness and resilience.• Partner with engineering and platform teams to embed security practices into application development and cloud operations.• Guide the evaluation and improvement of security tooling, including SIEM capabilities, to support visibility, detection, and response.• Advise senior leadership on security risks, priorities, and program maturity through clear reporting and actionable recommendations.Requirements• Demonstrated success leading information security teams within a FinTech, SaaS, or similarly regulated technology environment.• Strong experience managing compliance programs tied to FedRAMP, PCI standards, and SOC controls.• Deep knowledge of securing Linux systems, Kubernetes environments, and Java microservices architectures.• Expertise in threat intelligence, incident handling, and vulnerability management practices.• Broad understanding of application security, enterprise security, and network security principles.• Hands-on familiarity with SIEM platforms and security monitoring approaches.• Ability to communicate technical risk and security strategy effectively to both executive and technical audiences.Job typePerm