Information Security Lead, Method Financial

• Proven experience in managing and securing macOS environments and deploying endpoint security solutions
• Solid background in public cloud infrastructures like AWS, Cloudflare or Microsoft Azure, and proficiency in managing cloud security aspects
• Expertise in identity and access management, including familiarity with protocols like SAML, OAUTH, and SCIM
• 6+ years of experience in information security, preferably experience with financial institutions (banks, credit unions, financial services)
• Proven track record of developing and implementing comprehensive information security programs
• In-depth knowledge of security frameworks, standards, and regulations (e.g. NIST, SOC 2 Type 2, PCI-DSS)
• Strong technical skills in areas such as network security, access controls, vulnerability management, and incident response
• Excellent communication, project management, and problem-solving abilities

Desirable

• As a founding member of the information security team, you are responsible for developing, implementing, and maintaining the organization's information security program and controls to protect the confidentiality, integrity, and availability of the company's information assets
• This includes leading the security team, assessing and mitigating security risks, and ensuring compliance with relevant laws, regulations, and industry standards
• Develop and maintain the organization's information security strategy, policies, standards, and procedures
• Oversee the implementation and ongoing management of security controls, technologies, and processes
• Support our security and privacy certification processes (e.g. SOC2, PCI-DSS)
• Collaborate closely with IT, Engineering, Product, and Legal departments to enhance security frameworks and compliance with established policies
• Develop and maintain a vendor risk management program consistent with internal policies and risk thresholds
• Assist Sales & Product with inquiries from prospective customers, including:
• Completing pre-sales security reviews
• Answering specific RFP questions
• Providing details around the security features of the product
• Lead initiatives in data protection through advanced sharing controls, Data Loss Prevention (DLP), and other relevant security mechanisms