Cybersecurity Lead

Coverflex; United States; Remote; USD 72,000 - 105,000; Full time

Benefits offered by this job

Remote work

Stock options

Benefits package

Job summary

Coverflex is seeking a hands-on security leader to build and operate a growing, multi-market financial services security program. You will identify risks, strengthen security operations, assure suppliers, and maintain evidence for audits and customer trust.

Responsibilities include maintaining risk registers, updating privacy docs, improving threat detection, overseeing remediation, assessing third-party security, and coordinating corrective actions across teams and auditors.

Qualifications

• Lead-level experience running or materially improving a cybersecurity program in a regulated or risk-sensitive environment.
• Practical knowledge of cloud security in AWS and/or GCP, security monitoring, incident response, endpoint controls, IAM, and privileged access.
• Experience with vulnerability scanning, application security assessment, and penetration-testing processes.
• Ability to manage risks, remediation, audit evidence, and security roadmaps in structured tracking systems.
• Scripting or automation skills to operate controls and gather evidence efficiently.
• Strong communication and coordination skills for working across technical teams, leadership, suppliers, and auditors.

Responsibilities

• Maintain a risk register with accountable owners, treatment decisions, deadlines, and regular reviews; report key risks to leadership.
• Keep security management and related privacy documentation current, approved, and assigned to owners.
• Improve threat detection and response, vulnerability management, and security control operations.
• Review high-risk changes before launch and oversee remediation of critical findings, with documented exceptions where needed.
• Assess third-party security and track contractual, audit, and certification commitments.
• Validate controls through exercises and technical testing, then coordinate and track corrective actions.

Skills

Cybersecurity program leadership

Cloud security (AWS/GCP)

Security monitoring

Incident response

Identity and access management

Vulnerability management

Penetration testing

Automation/scripting

Audit evidence management

Communication across teams

Job description

Role overview

Build and operate a security program for a growing, multi-market financial services business. This hands-on individual contributor role focuses on identifying and managing risk, strengthening security operations and supplier assurance, and maintaining evidence that supports customer trust, audits, and reliable services.

Responsibilities

• Maintain a risk register with accountable owners, treatment decisions, deadlines, and regular reviews; report key risks to leadership.
• Keep security management and related privacy documentation current, approved, and assigned to owners.
• Improve threat detection and response, vulnerability management, and security control operations.
• Review high-risk changes before launch and oversee remediation of critical findings, with documented exceptions where needed.
• Assess third-party security and track contractual, audit, and certification commitments.
• Validate controls through exercises and technical testing, then coordinate and track corrective actions.

Requirements

• Lead-level experience running or materially improving a cybersecurity program in a regulated or otherwise risk-sensitive environment.
• Practical knowledge of cloud security in AWS and/or GCP, security monitoring, incident response, endpoint controls, identity and access management, and privileged access.
• Experience with vulnerability scanning, application security assessment, and penetration-testing processes.
• Ability to manage risks, remediation, audit evidence, and security roadmaps in structured tracking systems.
• Scripting or automation skills to operate controls and gather evidence efficiently.
• Strong communication and coordination skills for working across technical teams, leadership, suppliers, and auditors.

Nice to have

• Portuguese, Spanish, or Italian in addition to English.
• Experience with ISO 27001, privacy documentation, and third-party security assurance.

Benefits and work setup

• Permanent, remote role open to candidates based in Europe.
• Gross annual base salary of €65,000–€95,000, stock options, and the organization’s benefits package.