About the company
Affirm provides a clear, predictable way to pay over time, with no hidden fees and no surprises. This role supports the Bank as it prepares to launch as a de novo Industrial Loan Company (ILC).
Responsibilities
- Serve as Chief Information Security Officer and key member of the Bank's Management Team
- Design and implement an enterprise-wide security framework meeting FDIC and state regulatory expectations
- Oversee infrastructure design and IT Engineering
- Develop and maintain a comprehensive Information Security Program consistent with FDIC guidance (FIL-66-2019, FIL-13-2021)
- Develop policies, standards, and procedures for cybersecurity, data protection, and incident response
- Lead the technical build phase of the Bank's infrastructure, providing hands-on guidance for cloud security and DevOps integration
- Partner with Engineering on secure architectures including network segmentation, encryption standards, and identity governance
- Establish threat monitoring and detection capability
- Oversee layered security controls (network segmentation, encryption, access controls, endpoint protection, vulnerability management)
- Lead the Incident Response Program
- Evaluate information security posture of third-party and affiliate service providers
- Ensure compliance with privacy and data protection requirements (GLBA, Regulation P, state privacy laws)
- Assist in development and testing of Business Continuity and Disaster Recovery plans
- Build and document the technology and information security program for the de novo application process
- Build and lead a security team
Requirements
- Minimum 10 years of experience in information technology, security and technology risk management
- Demonstrated experience designing information security programs compliant with FDIC and FFIEC standards
- Strong familiarity with third-party risk frameworks and financial services cybersecurity expectations
- Experience leading incident response, penetration testing, and security operations in cloud-based and hybrid environments
- Proven track record of moving between strategic planning and hands-on technical execution