Director, Information Security

Loop; San Francisco (CA); On-site; USD 210,000 - 235,000; Full time

Benefits offered by this job

Health insurance

Equity compensation

Parental leave

Paid time off

401(k) match

Job summary

Loop is seeking a Director of Information Security to build and operate a comprehensive security program across architecture, operations, incident response, vulnerability management, cloud and application security, identity, and data protection. This role reports to the CISO and works closely with Engineering, Product, IT, Legal, and business units.

The role is in person in San Francisco, Chicago, or New York City, with a requirement to be in the office 4+ days per week.

Qualifications

• 10+ years of information security leadership experience.
• Deep technical expertise across cloud, application, identity, data protection, and incident response.
• Experience operating in cloud-native environments for fintech/enterprise SaaS.
• Strong understanding of AWS or comparable cloud environments and modern SaaS architectures.
• Ability to communicate security risks clearly to engineers, executives, and non-technical stakeholders.

Responsibilities

• Build and operate Loop’s information security program across architecture, operations, incident response, vulnerability management, identity and access, data protection, and vendor risk.
• Own execution across core information security domains and establish measurable security objectives and metrics.
• Bridge technical controls to meet compliance and audits, and partner with CTO for Product Security and DevSecOps integration.
• Lead security architecture and engineering with Engineering to embed security in the software development lifecycle.
• Develop and continuously improve incident-response processes, playbooks, and post-incident reviews.
• Protect Loop’s data and identity with robust IAM controls and data protection measures.
• Partner on risk, compliance, and customer security across frameworks such as SOC 2, NIST CSF, ISO 27001, GDPR.
• Build an organizational culture of security-first mindset and scale security capabilities.

Skills

Security leadership

Cloud security

Security operations

Incident response

Vulnerability management

Identity and access

Data protection

Security architecture

Threat modeling

Tools

AWS

DevSecOps

Job description

About the Role

The Director of Information Security will report to Loop’s CISO and serve as a senior technical and operational leader within the security organization.

You will be responsible for translating Loop’s security strategy into a high-performing security program across security architecture, security operations, incident response, vulnerability management, cloud and application security, identity and access, data protection, and technical security controls.

This is a builder role. You will work closely with Engineering, Product, IT, Legal, and business teams to identify risks, design practical controls, and ensure those controls work in practice — not just on paper.

Loop operates at the intersection of enterprise software, AI, data, and payments. The right person brings the technical depth and rigor expected in financial infrastructure while operating with the speed, judgment, and pragmatism required in a high-growth software company.

This is an in-person role based in San Francisco, Chicago, or New YorkCity with the exception of being in the office 4+ days per week.

What You’ll Do
Build and operate Loop’s information security program

• Partner with the CISO to translate Loop’s security strategy into a clear technical roadmap and operating plan.
• Own execution across core information security domains, including security operations, vulnerability management, incident response, identity and access, data protection, security architecture, and third party vendor risk management.
• Bridge technical controls needed to meet compliance and audit requirements.
• Partner with the CTO to ensure Product Security and DevSecOps integration.
• Establish measurable security objectives, operating metrics, and mechanisms for identifying and remediating risk.
• Continuously improve Loop’s security posture as the company, product, and threat environment evolve.

Lead security architecture and engineering

• Partner deeply with Engineering and Infrastructure to embed security into Loop’s architecture and software development lifecycle.
• Design and implement controls across cloud infrastructure, applications, APIs, endpoints, identity, data, and third-party integrations.
• Conduct and oversee threat modeling, architecture reviews, penetration testing, and technical risk assessments.
• Help teams make thoughtful security tradeoffs without unnecessarily slowing product development.
• Develop security architecture appropriate for increasingly autonomous AI systems, agents, and workflows.

Own security operations and incident response

• Build and operate capabilities for monitoring, detection, investigation, containment, and remediation.
• Own vulnerability management from discovery through prioritized remediation.
• Develop and continuously improve Loop’s incident-response processes, tooling, playbooks, and exercises.
• Lead technical response during security incidents and coordinate effectively across Engineering, IT, Legal, Communications, and executive leadership.
• Drive rigorous post-incident reviews and ensure lessons translate into durable improvements.

Protect Loop’s data and identity

• Partner with IT and Engineering to strengthen identity and access controls, including SSO, MFA, privileged access, RBAC, secrets management, and access lifecycle management.
• Establish technical controls protecting sensitive customer, financial, employee, and company data.
• Advance Loop’s capabilities around data classification, encryption, retention, loss prevention, and monitoring.
• Develop practical security guardrails for the adoption of generative AI, third-party models, agents, and other emerging technologies.

Partner on risk, compliance, and customer security

• Work with the CISO, Legal, and other stakeholders to translate frameworks such as SOC 2, NIST CSF, ISO 27001, NIST AI RMF, ISO 42001, GDPR and other data privacy requirements into effective technical controls.
• Provide technical leadership for security assessments, audits, penetration tests, and remediation programs.
• Support enterprise customer security reviews and engage directly with sophisticated customer security teams when technical depth is required.
• Assess security risks associated with vendors, partners, acquisitions, and new technologies.
• Ensure compliance requirements result in durable security improvements rather than check-the-box processes.

Build an organizational culture of security first mindset

• Help define the structure, capabilities, tooling, and talent Loop needs as the security organization scales.
• Recruit, develop, and lead exceptional security professionals.
• Build strong working relationships across Engineering, Product, IT, Legal, Finance, and Operations.
• Create leverage through automation, strong tooling, and clear ownership rather than relying on manual processes.
• Develop a culture where security is viewed as a shared engineering and business responsibility.

About You

• 10+ years of experience in information security, cybersecurity, security engineering, or related disciplines, with meaningful leadership experience.
• Deep technical expertise across several security domains, such as cloud security, application security, security operations, identity, infrastructure security, incident response, or vulnerability management.
• Experience operating security programs in a modern cloud-native technology environment.
• Experience in fintech, payments, enterprise SaaS, AI/data infrastructure, or another environment handling sensitive or regulated data.
• Strong understanding of AWS or comparable cloud environments, modern SaaS architectures, APIs, identity systems, and software development practices.
• Experience building and operating detection, vulnerability management, incident-response, and security-engineering capabilities.
• Working knowledge of security and control frameworks such as SOC 2, NIST CSF, ISO 27001, NIST AI RMF, ISO 42001, GDPR, and related standards.
• Comfortable personally diving into technical details while also leading teams and cross-functional programs.
• Able to communicate technical security risks clearly to engineers, executives, customers, and non-technical stakeholders.
• Strong judgment around risk. You know which issues require immediate action, which can be mitigated over time, and where additional process creates little incremental security.
• Builder mentality. You prefer designing better systems and automating controls to administering manual processes.
• High intellectual curiosity, particularly around the rapidly evolving security implications of AI and autonomous systems.

What Success Looks Like

• Translated Loop’s security strategy into a clear, measurable technical security roadmap.
• Improved Loop’s ability to identify, prioritize, and remediate vulnerabilities and security risks.
• Strengthened detection, incident-response, identity, data protection, and cloud/application security capabilities.
• Built strong, trusted partnerships with Engineering and Product and embedded security more deeply into how Loop builds software.
• Established clear metrics and operating rhythms for understanding the effectiveness of Loop’s security controls.
• Improved the scalability and automation of Loop’s security program.
• Developed a clear security architecture for Loop’s expanding use of AI, data, and automated workflows.
• Helped build the security team and technical foundation capable of supporting Loop’s next phase of growth.

Compensation and Benefits
The base pay range for this role is $210,000 to $235,000 annually. This range reflects the base pay that Loop reasonably expects to pay for the position at the time of hire. Actual compensation will depend on job-related factors, including experience, skills, qualifications, location, and business needs.

In addition to base salary, this role may be eligible for an annual performance bonus and equity. This role is also eligible for Loop’s benefits, including health, dental, and vision insurance, 401(k) match, paid time off, paid holidays, and parental leave.

Equal Opportunity
Loop is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by law.

Why You Should Join Loop

Loop operates at an unusually interesting intersection of AI, enterprise software, financial infrastructure, and supply-chain data. That creates security problems that are both technically challenging and consequential.

You will work directly with Loop’s CISO and engineering leadership to build a modern security program from the inside out — one that protects billions of dollars of financial activity and sensitive enterprise data without sacrificing the speed that has made Loop successful.

This is an opportunity to have significant ownership, build durable systems, and shape what excellent information security looks like at a rapidly scaling technology company.