Director, Information Technology & Security (Cybersecurity)

Location: Remote within the United States. Most work can be performed remotely within the country of employment, with occasional in-person office work and an in-person onboarding experience.

Base pay: $300,000–$360,000 per year in CA, WA, NY, NJ, and CT; $267,000–$327,000 per year in all other U.S. states.

Company

Affirm is a financial technology company building transparent payment products and preparing to launch Affirm Bank as a de novo Industrial Loan Company.

What you will do

• Serve as the Bank’s Chief Information Security Officer and lead the information security and cybersecurity programs.
• Design and implement the enterprise security framework, policies, governance, technical controls, and reporting required for FDIC and state regulatory expectations.
• Lead the technical build of cloud infrastructure and DevOps security, including network segmentation, encryption, identity governance, monitoring, and endpoint protection.
• Establish threat detection, vulnerability management, incident response, penetration testing, and cybersecurity resilience capabilities.
• Oversee third-party and affiliate security risk, vendor due diligence, ongoing monitoring, and contractual controls for providers handling sensitive financial data.
• Build the technology and security program for the de novo application and pre-opening process, while hiring and leading the security team.

Requirements

• At least 10 years of experience in information technology, information security, and security or technology risk management.
• Experience designing and implementing information security programs aligned with FDIC and FFIEC standards.
• Experience leading incident response, penetration testing, and security operations in cloud-based and hybrid environments.
• Deep expertise in cloud-native infrastructure, including AWS or GCP, DevOps practices, and software-defined security controls.
• Ability to communicate complex technical topics to executive leadership, the Board, and regulators.
• Must be located in the United States; visa sponsorship is not available.

Culture & Benefits

• Remote-first work model with flexibility within the country of employment.
• 100% subsidized medical, dental, and vision coverage for employees and dependents.
• Monthly technology, health, and wellness spending stipends.
• Flexible time off and generous holiday calendars.
• Employee stock purchase plan and potential equity rewards.

Hiring process

• Inclusive interview process with accommodations available for candidates with disabilities.