Director of IT & Security - Remote Banking Tech Leader

Affirm; Madison (WI); On-site; USD 267,000 - 360,000; Full time

Benefits offered by this job

Remote-first

100% subsidized medical coverage

Equity rewards

Tech setup stipends

Flexible time off

Job summary

Affirm seeks a Director, Information Technology & Security to lead the Bank’s information security program as it launches as an Industrial Loan Company (ILC). This blended role combines strategic governance with hands‑on technical execution across cloud security, DevOps, and incident response.

You will design enterprise security, oversee third‑party risk and governance, and ensure compliance with FDIC guidance and state laws while reporting to executive leadership and the Board.

Qualifications

• Minimum of 10 years of experience in information technology, security and technology risk management.
• Experience designing and implementing information security programs compliant with FDIC and FFIEC standards.
• Strong familiarity with third‑party risk frameworks and financial services cybersecurity expectations.
• Experience leading incident response, security operations in cloud-based and hybrid environments.
• Proven ability to communicate complex technical topics to executive leadership, the Board, and regulators.
• Deep expertise in cloud-native infrastructure (AWS/GCP), DevOps practices, and software-defined security controls.

Responsibilities

• Oversee infrastructure design and IT Engineering in a de novo bank setup.
• Lead Information Security Program Development aligned with FDIC requirements.
• Develop, implement, and maintain policies, standards, and procedures for cybersecurity and data protection.
• Partner with Engineering to define secure architectures including network segmentation and identity governance.
• Lead the Incident Response Program and engage regulators as needed.

Job description

Affirm seeks a Director, Information Technology & Security to lead the Bank’s information security program as it launches as an Industrial Loan Company (ILC). This blended role combines strategic governance with hands‑on technical execution across cloud security, DevOps, and incident response.

You will design enterprise security, oversee third‑party risk and governance, and ensure compliance with FDIC guidance and state laws while reporting to executive leadership and the Board.