CISO & Security Strategy Leader — Enterprise Risk

Cyberjobs; United States; Remote; USD 250,000 - 325,000; Full time

Benefits offered by this job

Flexible Paid Time Off

Medical, Dental, Vision

Life Insurance

Disability Insurance

401k with company match

Job summary

Attain Finance, a leading consumer credit lender, seeks an SVP, CISO to own strategy, execution, and governance of all security functions. You will partner with the CTO, report to the CAO, and align security with growth objectives while managing risk in a regulated environment.

Responsibilities include maturing security strategy, leading a multi-domain team, owning risk management, and driving incident response.

Qualifications

• 15+ years in information security with at least 5 years in senior leadership
• Deep knowledge of cybersecurity frameworks (NIST CSF, ISO 27001, SOC 2, CIS Controls)
• Experience securing cloud-native or hybrid environments (AWS/Azure/GCP)
• Strong understanding of financial services regulatory landscape (SEC, FINRA)
• Ability to communicate complex security risks to boards/investors
• Experience building security programs for growth-stage financial firms
• Relevant certifications preferred (CISSP, CISM, CRISC)
• Bachelor’s in Computer Science, Information Security, or related field; advanced degree preferred

Responsibilities

• Develop and mature enterprise security strategy, framework, and roadmap
• Partner with CTO to embed security into architecture, infrastructure, and software development
• Lead security team across operations, vulnerability management, IAM, and data protection
• Own risk management program, including assessments, gap analyses, and remediation
• Enhance incident response capabilities from detection to post-incident review
• Ensure regulatory compliance with FTC Safeguards Rule and other laws
• Report security posture to Board, executives, and auditors
• Oversee third-party and vendor risk management in procurement and contracts
• Drive security awareness and training across the organization
• Evaluate and optimize security technology stack and threat hunting program
• Establish internal red team and adversary emulation capabilities

Skills

InfoSec leadership

Cloud security

Security governance

Regulatory compliance

Vendor risk management

Security reporting

Certifications: CISSP/CISM/CRISC

Education

Bachelor's in CS/InfoSec

Advanced degree preferred

Tools

AWS

Azure

GCP

Job description

Attain Finance, a leading consumer credit lender, seeks an SVP, CISO to own strategy, execution, and governance of all security functions. You will partner with the CTO, report to the CAO, and align security with growth objectives while managing risk in a regulated environment.

Responsibilities include maturing security strategy, leading a multi-domain team, owning risk management, and driving incident response.