The Director of Information Security and Technical Operations is responsible for the strategy, implementation and day to day management of the Company’s information security program and core technology operations, including infrastructure, network administration and shared technology services.  This role is critical for a regulated financial institution and ensures the Company meets and maintains FTC, NYDFS, SOC 2, NIST, and other applicable regulatory and industry standards.

Pay Range USD $170,000.00 - USD $200,000.00 /Yr.

APPLY HERE: https://careers.foundationfinance.com/jobs/2110?lang=en-us

Essential Duties and Responsibilities include the following. Other duties may be assigned.

• Develop, own, and continuously improve the Company’s enterprise-wide Information Security Program, including strategy, policies, standards and roadmap, in alignment with business and regulatory requirements (FTC Safeguards Rule, SOC 2, NIST 800‑53/CSF, NYDFS 23 NYCRR 500).
• Direct and lead day‑to‑day security operations and maintain ongoing operation of secure network architectures, including segmentation, firewalls, VPNS, connectivity with vendors, threat detection, incident response, vulnerability management, and security monitoring across cloud and on‑prem environments.
• Oversee core technology operations, including IT infrastructure, network administration, endpoint management, identity and access management and core productivity/tech services platforms.
• Own the security and technology controls required for SOC 2 audits, including evidence collection, control operation, remediation plans, and engagement with external auditors and customer due diligence teams.
• Implement and maintain a risk management framework aligned to NIST and serve as the Company’s designated Qualified Individual for purposes of the FTC Safeguards Rule, overseeing compliance with NYDFS 23 NYCRR Part 500, including risk assessments, incident response coordination, treatment plans, and regular reporting of risk posture to executive leadership and the board.
• Partner closely with Product, Engineering, and Data teams to embed security‑by‑design, conduct security architecture reviews, and manage application and API security across the fintech platform.
• Lead third‑party and vendor security risk management, including due diligence, contract security requirements, ongoing monitoring, and exception management.
• Define and track security and operational KPIs/KRIs (e.g., incident MTTR, patching SLAs, control coverage, uptime/availability) and present regular metrics and program updates to senior leadership and the board.
• Develop and manage the information security and operations budget including resource planning and tooling strategy, as well as establish training programs tailored for a fintech workforce to support scalable and efficient growth.
• Other duties as assigned by management.

Minimum Qualifications:

• 
  
• Bachelor’s degree in computer science, engineering, business or similar relevant field; master’s degree preferred.
• At least 4 years in a senior leadership role (Director, Senior Director, Head of Security, CISO, or similar) in a cloud centric or SaaS/fintech environment.
• Minimum 8 years of progressive experience in information security and IT operations.
• Strong working knowledge of SOC 2 compliance, leading audits, meeting NYDFS and FTC information security requirements or similar financial sector regulations, including governance and reporting obligations, NIST security frameworks (e.g., NIST CSF, NIST 800 53).
• Experience mapping and implementing controls across hybrid/cloud environments.
• Understanding of modern cloud architectures (AWS/Azure/GCP), DevSecOps practices, identity and access management, endpoint security, and security monitoring / SIEM platforms.
• Relevant certifications such as CISSP, CISM, CISA, CCSP, or equivalent and experience with additional frameworks and regulations (e.g., ISO 27001, PCI DSS, GLBA) preferred.

About Foundation Finance:

Foundation Finance Company (FFC), a Great Place to Work® certified company since 2017, is a fast-growing consumer finance company working with home improvement contractors across the U.S. to drive sales through flexible, customer-focused financing options.

Available Benefits:

· Day-one Health Benefits (medical, dental, vision, and flexible spending options like HSA or FSA accounts).
· 401(k) with company match enrollment on day-one.
· Paid, Sick and Volunteer Time Off
· Paid Parental Leave Options
· Employer Paid Life and Disability
· Wellbeing on Demand Program
· Flexible Work Environment with a casual dress code