Information Security Lead

New York, NY. Posted a month ago

The role

You will be a hands-on security practitioner performing technical work and GRC tasks. You will configure tooling, harden systems, investigate alerts, and manage customer security questionnaires and audits.

What you will do

Configure, tune, and operate security tooling across the stack
Triage and respond to security alerts, bug bounty reports, and internal escalations
Own customer security questionnaires and due diligence reviews end-to-end
Contribute to third-party risk reviews of new vendors and existing critical suppliers
Drive hardening or modernization initiatives
Partner with the Director of Information Security on roadmap and prioritization
Act as an internal expert for technical security questions
Execute on control sets and support SOC 2 and ISO 27001 audits

Required qualifications

3–6+ years across information security, security engineering, cloud security, or technical GRC roles
Comfortable configuring and operating modern security tooling such as EDR, MDM, SSO/IAM, DLP, and cloud security tooling
Working knowledge of AWS security, IAM, networking, KMS, logging, and common misconfiguration risks
Solid grasp of networking, identity, cryptography, secure SDLC, and web application security
Ability to explain technical risk to engineering team members and write clean policy

Nice to have

Experience in a high-growth fintech, financial services, or regulated SaaS environment
Knowledge of Jamf, SentinelOne, Okta
Direct experience with SOC 2 Type II and ISO 27001

Benefits

Equity grants
Incentive compensation
Professional development
Flexible PTO
Tenure rewards
Comprehensive and generously subsidized medical, dental, and vision insurance options
Company-sponsored 401k plan
Parental leave of absence
Sick time off
Paid time off vacation

About the company

Nova Credit is a credit infrastructure and analytics company that enables businesses to grow responsibly by harnessing alternative credit data. The company leverages its unique data infrastructure, industry-leading analytics and FCRA-compliance to help lenders fill in the gaps that exist in traditional credit analytics.