Hybrid Information Security Lead: Fintech Risk & Compliance

Nova Credit; New York (NY); Hybrid; USD 118,000 - 141,000; Full time

Job summary

Nova Credit is seeking an Information Security Lead to drive hands-on technical work and governance. You will partner with the Director of Information Security to mature the security program, juggle tooling configuration with audit responses, and own program initiatives end-to-end in a fast-growing fintech environment.

The role is hybrid in the New York City area, requiring collaboration across Engineering, Product, and Data Science to scale controls and protect customer data.

Qualifications

• 3–6+ years across information security, security engineering, cloud security, or technical GRC roles.
• Hands-on technical depth: configure and operate modern security tooling (EDR, MDM, SSO/IAM, DLP, cloud security tooling).
• Cloud security: AWS security, IAM, networking, KMS, logging, misconfiguration risks.
• Foundational concepts: networking, identity, cryptography, secure SDLC, web app security.
• GRC/audit fluency: SOC 2 Type II and ISO 27001 are a plus.
• Communication: explain risk, write policy, and discuss with an Eng lead.
• All-rounder mindset: blend technical and non-technical work.

Responsibilities

• Develop understanding of Nova Credit’s products, AWS infrastructure, and data flows from a security perspective.
• Familiarize with control sets, policies, and customer security commitments.
• Hands-on with security tooling stack (EDR, MDM, SSO/IAM, DLP, cloud security).
• Shadow customer security questionnaires and due diligence reviews to learn the cadence and artifacts.
• Triage and respond to security alerts; document repeatable response runbooks.

Skills

Security engineering

Cloud security

GRC/audit fluency

Communication skills

IAM/SSO configuration

Tools

EDR

MDM

SSO/IAM

DLP

Jamf

SentinelOne

Okta

Job description

Nova Credit is seeking an Information Security Lead to drive hands-on technical work and governance. You will partner with the Director of Information Security to mature the security program, juggle tooling configuration with audit responses, and own program initiatives end-to-end in a fast-growing fintech environment.

The role is hybrid in the New York City area, requiring collaboration across Engineering, Product, and Data Science to scale controls and protect customer data.