Senior Security Lead

Lendbuzz; Boston (MA); On-site; USD 180,000 - 260,000; Full time

Job summary

Lendbuzz is seeking a Senior Security Lead to partner with the CISO and drive the security strategy across the organization. You will own key initiatives, steer day-to-day security operations, and translate business goals into scalable security programs and controls.

You will collaborate with engineering, product, legal, compliance and other teams to align security priorities with business objectives, support audits and regulatory requirements, and push forward AI-driven security enhancements

Qualifications

• 8+ years of experience in Information Security, Cyber-security or Security Engineering
• Proven experience leading security programs or initiatives in large-scale, high-growth organizations
• Strong background across multiple security domains, including Security Engineering, Security Operations, Cloud Security, Incident Response, Vulnerability Management and Governance

Responsibilities

• Partner with the CISO on Lendbuzz's security strategy and roadmap, and own the execution of key initiatives
• Help run the day-to-day of the security function: priorities, planning, tracking, metrics and follow-through
• Translate business objectives into scalable security programs and controls
• Act as a key stakeholder in security governance, risk management and decision-making
• Work with senior leaders across Engineering, Infrastructure, Product, Legal, Compliance and Business teams to align on security priorities and drive cross-functional initiatives
• Support regulatory, audit and customer security requirements, keeping security aligned with business goals and commitments
• Drive the adoption of AI, automation and emerging technologies to improve security effectiveness and efficiency
• Foster a culture of accountability, operational excellence and security ownership across the organization

Skills

Information Security

Security Leadership

Cloud Security

Security Operations

Regulatory Compliance

Risk Management

Communication to Stakeholders

Security Architecture

Tools

CrowdStrike

Wiz

Okta

SIEM

Identity Solutions

Job description

At Lendbuzz, we believe financial opportunity should be more personalized and fair. We develop innovative technologies that provide underserved and overlooked borrowers with better access to credit. From our employees to our dealers, partners, and borrowers, we’ve built a company and a culture around a resolute belief in the promise and power of diversity. We value independent and critical thinking.

We're looking for a Senior Security Lead to partner closely with our CISO in driving Lendbuzz's security strategy and running the day-to-day of the security function. You'll own the execution of key initiatives, keep the security program on track, and work with senior stakeholders across the company to make security part of how we build and operate.

This role suits someone who combines strong technical depth with excellent communication skills and strong project management capabilities. You'll have broad scope, high visibility, and a direct impact on how security works at Lendbuzz.

Key Responsibilities:

• Partner with the CISO on Lendbuzz's security strategy and roadmap, and own the execution of key initiatives
• Help run the day-to-day of the security function: priorities, planning, tracking, metrics and follow-through
• Translate business objectives into scalable security programs and controls
• Act as a key stakeholder in security governance, risk management and decision-making
• Work with senior leaders across Engineering, Infrastructure, Product, Legal, Compliance and Business teams to align on security priorities and drive cross-functional initiatives
• Support regulatory, audit and customer security requirements, keeping security aligned with business goals and commitments
• Drive the adoption of AI, automation and emerging technologies to improve security effectiveness and efficiency
• Foster a culture of accountability, operational excellence and security ownership across the organization

Requirements:

• 8+ years of experience in Information Security, Cyber-security or Security Engineering
• Proven experience leading security programs or initiatives in large-scale, high-growth organizations
• Strong background across multiple security domains, including Security Engineering, Security Operations, Cloud Security, Incident Response, Vulnerability Management and Governance
• Extensive experience securing cloud-native environments (AWS, GCP and/or Azure)
• Deep understanding of security architecture, security controls and modern security technologies
• Experience with regulatory frameworks, audits, compliance programs and risk management
• Excellent communication skills. You write and present clearly to senior stakeholders and can explain technical risk in business terms.
• Highly organized, with sound judgment and a strong sense of ownership
• Fluent English, with experience working with global teams and international stakeholders

Nice-to-Have:

• Experience in fintech, financial services or highly regulated environments
• Experience leading AI security or security automation initiatives
• Hands-on experience with modern security platforms such as CrowdStrike, Wiz, Okta, SIEM and identity solutions
• Certifications such as CISSP, CISM, CCSP, CRISC or equivalent
• Experience building and scaling security teams

What we offer:

• A culture that values product ownership, collaborative architectural planning, and building wins for your resume/portfolio as much as for the company.
• Smart, dynamic people with whom you can share the experience of building something unique.
• Competitive salary with opportunities for growth and advancement.