Director of Security & Risk

The role

The Director of Security & Risk will lead security governance, compliance, assurance, and risk management programs. You will manage a team of professionals and own programs including FedRAMP, SOC 2, and PCI DSS within a technical AWS-based environment.

What you will do

• Lead and develop SentiLink's security governance, risk, and compliance organization.
• Manage and mentor security and compliance professionals.
• Own security compliance and audit programs including FedRAMP, SOC 2, and PCI DSS.
• Drive the ongoing maturity of SentiLink's government security program.
• Establish and operate a rigorous security risk management program.
• Lead SentiLink's third-party security risk management program.
• Own customer and partner security assurance.
• Own security policy and control governance.
• Continuously improve the effectiveness and scalability of security programs.

Required qualifications

• 10+ years of experience in information security, including significant experience leading security governance, compliance, assurance, or risk management programs.
• Demonstrated experience owning major security compliance and assurance programs such as FedRAMP, SOC 2, PCI DSS, or comparable regulatory frameworks.
• Strong technical understanding of modern cloud infrastructure, SaaS application security, identity and access management, vulnerability management, and security architecture.
• Proven ability to build and improve security programs, independently identify control gaps and emerging requirements, establish priorities, and translate security risks into actionable organizational
• Experience managing and developing security professionals, establishing high standards for quality and accountability, and leading programs across distributed teams.
• Experience with third-party risk assessments, customer security diligence, and security risk management.
• Strong written and verbal communication skills, sound judgment, and the ability to influence engineering teams, business leaders, auditors, and external stakeholders.

Benefits

• Employer paid group health insurance for you and your dependents
• 401(k) plan with employer match (or equivalent for non US-based roles)
• Flexible paid time off
• Regular company-wide in-person events
• Home office stipend

About the company

SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company serves 13 of the top 15 U.S. banks and is a digital-first company with offices in the U.S. and India.