jobapplier

Information Security Lead

Nova Credit

Skills

Required

  • cloud security
  • MDM
  • SSO/IAM
  • DLP
  • networking
  • GRC
  • disagree
  • modern security tooling
  • cloud security tooling
  • Jamf

Preferred

  • IAM
  • AWS security
  • KMS
  • logging
  • misconfiguration
  • reason about real architecture

Join Nova Credit as the Information Security Lead, where you'll play a crucial role in maturing our security program. You'll work closely with the Director of Information Security, engaging in both technical and governance, risk, and compliance tasks. This hands-on position requires a blend of technical expertise and a passion for security.

Collaborer avec le directeur de la sécurité de l'information pour faire progresser le programme de sécurité de l'entreprise, en passant du travail technique aux aspects de gouvernance, de risque et de conformité.

Responsibilities

  • Assumer la responsabilité des questionnaires de sécurité des clients et des examens de diligence raisonnable de bout en bout, en veillant à des réponses précises et complètes.
  • Configurer, ajuster et exploiter les outils de sécurité de l'entreprise, y compris EDR, MDM, SSO/IAM, DLP, et gérer les alertes de sécurité.
  • Cloud security: Working knowledge of AWS security, IAM, networking, KMS, logging, and common misconfiguration risks. You can reason about real architecture and point out where the risks are
  • All-rounder mindset: You are equally willing to dig into a misconfigured IAM policy and fill out a 200-question bank questionnaire. You don’t silo the work into “technical” and “non-technical.”

Requirements

  • Communication: You can explain a technical risk to engineering team members, write a clean policy, and disagree productively with an Engineering lead in the same week
  • Hands-on technical depth: Comfortable configuring and operating modern security tooling such asEDR, MDM, SSO/IAM, DLP, and cloud security tooling. Knowledge of Jamf, SentinelOne, Okta are a plus
  • Foundational concepts: Solid grasp of networking, identity, cryptography, secure SDLC, and web application security. You don’t need to be an offensive security specialist, but you should know how attackers think
  • Experience: 3–6+ years across information security, security engineering, cloud security, or technical GRC roles, ideally with at least some time in a high-growth fintech, financial services, or regulated SaaS environment
  • GRC / audit fluency: Direct experience with SOC 2 Type II and ISO 27001 are a plus

Pay

USD 118,400 - 140,600