Director of Security, Risk
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
Responsibilities:
- Lead and develop SentiLink's security governance, risk, and compliance organization
- Manage and mentor security and compliance professionals and develop organizational and hiring plans
- Own security compliance and audit programs, including FedRAMP, SOC 2, and PCI DSS
- Lead external assessments, manage control effectiveness and evidence collection, oversee Vanta and compliance automation
- Oversee FedRAMP continuous monitoring, POA&M governance, change-management compliance, agency-specific requirements, and assessment readiness
- Establish and operate a rigorous security risk management program
- Own identification, assessment, documentation, escalation, and treatment of security risks, control deficiencies, and exceptions
- Lead third-party security risk management, vendor diligence, assessment quality, and ongoing vendor oversight
- Lead customer and partner security assessments and audits
- Evaluate contractual security requirements with Legal and coordinate technical responses
- Own security policy and control governance and maintain policies, standards, and control frameworks
- Develop accountability, measurable outcomes, repeatable processes, and automation
- Identify emerging risks and requirements, communicate recommendations to leadership, and drive improvements across organizational boundaries
- Report to SentiLink's security leader and collaborate with Security Engineering, Engineering, IT, Legal, Product, and business teams
- Build a proactive, effective, and scalable security program that meaningfully reduces organizational risk
Requirements:
- 10+ years of experience in information security, including significant experience leading security governance, compliance, assurance, or risk management programs
- Demonstrated experience owning major security compliance and assurance programs such as FedRAMP, SOC 2, PCI DSS, or comparable regulatory frameworks
- Direct engagement with auditors, assessors, and external stakeholders
- Strong technical understanding of modern cloud infrastructure, SaaS application security, identity and access management, vulnerability management, and security architecture
- Ability to independently evaluate technical findings, control designs, and remediation approaches
- Proven ability to build and improve security programs, identify control gaps and emerging requirements, establish priorities, and translate security risks into actionable organizational plans
- Experience managing and developing security professionals and leading programs across distributed teams
- Experience with third-party risk assessments, customer security diligence, and security risk management
- Ability to evaluate complex technical and contractual security requirements
- Strong written and verbal communication skills, sound judgment, and ability to influence engineering teams, business leaders, auditors, and external stakeholders
- This is a remote, US-based position
- Must be legally authorized to work in the United States
Benefits:
- Employer paid group health insurance for you and your dependents
- 401(k) plan with employer match
- Flexible paid time off
- Regular company-wide in-person events
- Home office stipend
- Equity
Similar Jobs
Vulnerability Management Engineer, Security Assessment – Qualys VMDR
Vulnerability engineer operating Qualys VMDR, security assessments, and remediation tracking. Supporting Gruve’s enterprise cybersecurity and cloud infrastructure services through global 24x7 operations.
Senior Cloud Security Engineer
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Information Security Consultant
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.
Security Assessor
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.