Chief IT & Security Leader (Cloud & Risk)

Security Executive Council; St. Louis (MO); Remote; USD 267,000 - 360,000; Full time

Benefits offered by this job

Health coverage

Tech spending stipends

Flexible time off

Equity rewards / ESPP

Job summary

Affirm is seeking a Director, Information Technology & Security to lead enterprise security programs as part of the Bank's Management Team. The role combines strategic governance with hands-on technical build, including cloud security, DevOps integration, and risk oversight across vendors and third parties.

You will drive enterprise-wide security architecture, data protection, business continuity, and regulatory alignment across FDIC and FFIEC standards, preparing the de novo ILC for launch and

Qualifications

• Minimum of 10 years of experience in information technology, and security and technology risk management.
• Strong familiarity with third-party risk frameworks and financial services cybersecurity expectations.
• Experience leading incident response, penetration testing, and security operations in cloud-based and hybrid environments.
• Proven ability to communicate complex technical topics to executive leadership, the Board, and regulators.
• Deep expertise in cloud-native infrastructure (AWS/GCP), DevOps practices, and software-defined security controls.

Responsibilities

• Oversee infrastructure design and IT engineering.
• Develop and oversee a comprehensive information security program compliant with FDIC guidance.
• Lead the design and implementation of security architectures and policies.
• Provide regular reporting to the Board on security posture and risks.
• Lead the Bank's incident response program and coordinate with regulators as needed.
• Manage third-party and affiliate risk oversight under Vendor Management Program.

Skills

Security governance

Incident response

Regulatory compliance

Cloud security

Vendor risk management

Job description

Affirm is seeking a Director, Information Technology & Security to lead enterprise security programs as part of the Bank's Management Team. The role combines strategic governance with hands-on technical build, including cloud security, DevOps integration, and risk oversight across vendors and third parties.

You will drive enterprise-wide security architecture, data protection, business continuity, and regulatory alignment across FDIC and FFIEC standards, preparing the de novo ILC for launch and