Senior Manager, Information Security

Nations Lending Corporation; Kentucky; On-site; USD 120,000 - 190,000; Full time

Job summary

Nations Lending Corporation seeks an experienced Information Security Leader to own the program across governance, risk, compliance, and incident management in the U.S. mortgage banking sector.

You will partner with technology, compliance, and business leaders to implement effective security controls and drive remediation of audit findings. The role requires 5+ years in information security with audits and regulatory engagements, plus relevant certifications.

Qualifications

• Minimum 5+ years in information security with audit/compliance exposure.
• Experience in financial services or regulated industries preferred.
• Strong knowledge of controls, risk management, audits and compliance frameworks.

Responsibilities

• Own and mature the information security program including policies, risk assessments, and controls.
• Lead security incident response, remediation, and disaster recovery testing.
• Oversee cloud security, vulnerability management, and privileged access governance.
• Manage third-party security reviews and vendor risk assessments.
• Keep the security risk register up to date and remediate audit findings.
• Collaborate with User Services to ensure access governance.

Skills

Information security governance

Audit & regulatory engagement

Risk management

Leadership

Communication with auditors/regulators

Education

CISSP, CISM, CISA, CRISC or equivalent

Job description

Owns the organization's information security program, including governance, risk and compliance (GRC), audit and regulatory response, incident management, cloud security, and vendor risk oversight. Responsible for maintaining audit readiness, driving remediation efforts, ensuring compliance with regulatory requirements, and strengthening the organization's overall security posture. Leads the IT Infrastructure Analyst and partners closely with technology, compliance, and business leaders to implement and sustain effective security controls.

*Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.*

Core Responsibilities

• Own and mature the information security program, including policies, risk assessments, controls, and security standards.
• Serve as the primary technology contact for audits, regulatory examinations, and security assessments.
• Lead security incident response, remediation efforts, and disaster recovery testing.
• Oversee cloud security, vulnerability management, privileged access governance, and certificate management.
• Manage third-party security reviews and vendor risk assessments.
• Maintain the security risk register and drive remediation of audit findings and control gaps.
• Partner with User Services to ensure effective access management and asset governance.
• Manage and develop the IT Infrastructure Analyst and translate security priorities into operational execution.
• Must be comfortable on camera and use Teams with all colleagues and in all department and company interactions.

Qualifications

• 5+ years of information security experience, including audit, compliance, or regulatory engagement.
• Experience in financial services, mortgage banking, or a regulated industry preferred.
• Strong knowledge of security controls, risk management, audits, and compliance frameworks.
• CISSP, CISM, CISA, CRISC, or similar certification preferred.
• Leadership experience and strong communication skills with auditors, regulators, and executive leadership.