Information Security Program Development

Design, implement, and maintain a comprehensive Information Security Program consistent with FDIC guidance (e.g., FIL-66-2019, FIL-13-2021) and the Interagency Guidelines Establishing Information Security Standards.

Develop and oversee policies, standards, and procedures governing cybersecurity, data protection, and incident response.

Ensure alignment with the Bank’s overall risk management and governance frameworks.

Provide regular reporting to executive management and the Board on the Bank’s security posture, emerging risks, and mitigation efforts.

Cybersecurity and Threat Management

Establish and manage a threat monitoring and detection capability to identify, assess, and respond to cybersecurity risks.

Oversee implementation of layered security controls (e.g., network segmentation, encryption, access controls, endpoint protection, vulnerability management).

Lead the Bank’s Incident Response Program, ensuring timely escalation and coordination with regulators when required.

Maintain relationships with information-sharing groups (e.g., FS-ISAC) and law enforcement to stay informed of emerging threats.

Third-Party and Affiliate Risk Oversight

Evaluate the information security posture of third-party and affiliate service providers in accordance with the Bank’s Vendor Management Program and FDIC third-party risk guidance.

Director, Information Technology & Security

Responsibilities

Benefits

Company

Affirm

More roles at Affirm