Senior InfoSec Engineer - Onsite NYC, Lead Security Program

Enterprise Engineering Inc. (EEI); New York (NY); On-site; USD 120,000 - 190,000; Full time

Job summary

Enterprise Engineering Inc. (EEI) in New York City seeks a Senior Information Security Engineer to lead a world-class information security program, driving compliance processes and serving as the SME on security matters.

The role focuses on maintaining SOC 2 Type 2 and PCI-DSS compliance while expanding use of NIST, CIS, and ISO27001 standards, and coordinating client due diligence with partners.

Qualifications

• 10 years of experience managing or leading information security functions.
• Experience managing information security control standards, including SOC2, PCI-DSS, NIST CSF, and ISO 27001.
• Experience with FinTech or highly regulated sectors.
• Strong background in API-centric SaaS enterprise financial software.
• Consultative approach towards security with the ability to guide and educate developers on security best practices.
• Experience in security operations, incident response and managing security incidents.
• Exceptional written and verbal communication skills.
• Relevant certifications (CISSP, CISM, CCSP), advanced degree, or equivalent experience preferred.

Responsibilities

• Maintain policies, processes, and procedures to protect the confidentiality, integrity, and availability of data and services.
• Mature the information security program to continually client, reassess, and mitigate security risks as the business, product, and customer landscape changes.
• Ownership over cloud infrastructure security, security operations, application security, and GRC.
• Partner with product management, software development, infrastructure, and operations to ensure that confidentiality, integrity, and availability outcomes for products and services are met.

Skills

Information security

Security governance

Compliance management

Cloud security

Risk management

Security operations

Incident response

Communication skills

Education

Bachelor's degree in Computer Science or MIS

Job description

Enterprise Engineering Inc. (EEI) in New York City seeks a Senior Information Security Engineer to lead a world-class information security program, driving compliance processes and serving as the SME on security matters.

The role focuses on maintaining SOC 2 Type 2 and PCI-DSS compliance while expanding use of NIST, CIS, and ISO27001 standards, and coordinating client due diligence with partners.