Oversee infrastructure design and IT Engineering

Information Security Program Development

Design, implement, and maintain a comprehensive Information Security Program consistent with FDIC guidance (e.g., FIL-66-2019, FIL-13-2021) and the Interagency Guidelines Establishing Information Security Standards.

Develop and oversee policies, standards, and procedures governing cybersecurity, data protection, and incident response.

Ensure alignment with the Bank’s overall risk management and governance frameworks.

Provide regular reporting to executive management and the Board on the Bank’s security posture, emerging risks, and mitigation efforts.

Lead the technical build phase of the Bank's infrastructure, providing direct oversight and hands-on guidance for cloud security and DevOps integration.

Partner deeply with Engineering to define and implement secure technical architectures, including network segmentation, encryption standards, and identity governance.

Cybersecurity and Threat Management

Establish and manage a threat monitoring and detection capability to identify, assess, and respond to cybersecurity risks.

Oversee implementation of layered security controls (e.g., network segmentation, encryption, access controls, endpoint protection, vulnerability management).

Lead the Bank’s Incident Response Program, ensuring timely escalation and coordination with regulators when required.

Director, Information Technology & Security

Responsibilities

Qualification

Required

Benefits

Company

Affirm

More roles at Affirm