InfoSec Lead: Cloud Security & GRC Champion (Hybrid)

novacredit; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Nova Credit seeks an Information Security Lead to bridge hands-on security work and governance, risk, and compliance across the org. You will harden systems, configure tooling, investigate alerts, and respond to customer security questionnaires and audits with the Director of Information Security.

You will partner across Engineering, Product and Data Science, own security program initiatives, and help scale controls as Nova grows in a hybrid NYC setting.

Qualifications

• 3–6+ years in information security, security engineering, cloud security, or technical GRC.

Responsibilities

• Within the first month: Develop understanding of Nova Credit's products, AWS infrastructure, and key data flows from a security perspective.
• Within the first quarter: Own customer security questionnaires end-to-end, from intake to evidence to responses and follow-up calls.
• Within the first year: Own an agreed slice of the security program end-to-end with measurable outcomes.

Skills

Information security

Security engineering

Cloud security

GRC

EDR

MDM

SSO/IAM

DLP

AWS security

Tools

Jamf

SentinelOne

Okta

Job description

Nova Credit seeks an Information Security Lead to bridge hands-on security work and governance, risk, and compliance across the org. You will harden systems, configure tooling, investigate alerts, and respond to customer security questionnaires and audits with the Director of Information Security.

You will partner across Engineering, Product and Data Science, own security program initiatives, and help scale controls as Nova grows in a hybrid NYC setting.