Senior InfoSec Architect & Compliance Leader

Enterprise Engineering Inc. (EEI); New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Enterprise Engineering Inc. (EEI) seeks a Senior Information Security Engineer to operate a world-class information security program.

You will implement information security compliance processes and act as the subject matter expert in all-things information security. The Senior Security Engineer will establish, lead, and maintain the Information Security Management program comprised of policies, procedures, and systems to manage risks to its customers.

Qualifications

• 10 years of experience managing or leading information security functions.
• Experience managing information security control standards including SOC2, PCI-DSS, NIST CSF, ISO 27001.
• Experience in FinTech, banking or highly regulated sectors.
• Strong background in API-centric SaaS enterprise financial software.
• Consultative approach to security with the ability to educate developers.
• Experience in security operations, incident response and managing security incidents.
• Bachelor’s degree in Computer Science or MIS.
• Certifications such as CISSP, CISM, CCSP preferred.

Responsibilities

• Maintain and mature policies, processes, and procedures to protect data confidentiality, integrity, and availability.
• Grow the information security program to continuously reassess and mitigate risks.
• Own cloud security, security operations, app security, and GRC.
• Maintain SOC Type 2 and PCI-DSS compliance.
• Manage security across AWS and Azure cloud infrastructure.
• Serve as a technical mentor for security engineering.
• Lead technology diligence with customers and partners as we scale.
• Collaborate with product, software development, infra, and ops to meet security outcomes.

Skills

InfoSec leadership

Security governance

Cloud security

API-centric security

Communication skills

Education

Bachelor's in Computer Science or MIS

CISSP / CISM / CCSP

Tools

SOC 2

PCI-DSS

NIST CSF

ISO 27001

Job description

Enterprise Engineering Inc. (EEI) seeks a Senior Information Security Engineer to operate a world-class information security program.

You will implement information security compliance processes and act as the subject matter expert in all-things information security. The Senior Security Engineer will establish, lead, and maintain the Information Security Management program comprised of policies, procedures, and systems to manage risks to its customers.