Chief Information Security & Risk Leader (Fintech)

Magis Capital Partners; Berwyn (PA); On-site; USD 150,000 - 165,000; Full time

Job summary

FIDx is seeking a Head of Information Security to protect its platform, data, and reputation as it scales. You will define and execute the company’s information security, data privacy, and cyber-risk strategy, reporting to the CTO with direct engagement with the CEO and Board.

This hands-on leader will own security operations, risk management, and incident response, with plans to build and lead a dedicated security team as the company grows.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 7–15 years of information security leadership with prior senior roles.
• Financial services, insurance, fintech experience preferred.
• Certifications such as CISSP/CISM/CRISC/CISA/CCSP preferred.
• Hands-on enterprise security program development, ideally in early-stage environments.
• Strong cloud & API security with secure SDLC / DevSecOps experience.
• Familiarity with SOC 2, NIST, ISO 27001, GLBA, CCPA frameworks.
• Vendor risk management and budgeting responsibilities.

Responsibilities

• Own and operate the information security program and act as SME on cybersecurity and data privacy.
• Lead enterprise security governance, risk, and compliance activities with executive buy-in.
• Embed security into product development and partnerships; balance protection with delivery speed.
• Oversee security operations, incident response, and threat management programs.
• Build and mentor a security function as the company scales; hire as needed.

Skills

Security leadership

Cloud security

DevSecOps

Incident response

Vendor risk

Education

Bachelor's degree

Master’s degree preferred

Security certifications

Job description

FIDx is seeking a Head of Information Security to protect its platform, data, and reputation as it scales. You will define and execute the company’s information security, data privacy, and cyber-risk strategy, reporting to the CTO with direct engagement with the CEO and Board.

This hands-on leader will own security operations, risk management, and incident response, with plans to build and lead a dedicated security team as the company grows.