Director of Information Security Engineering
$170,000–$220,000 year
HybridArlington, Massachusetts, United States
Job Summary
Design, implement, and operate enterprise security platforms while establishing and advancing the Bank's AI security strategy. Lead security engineering programs across cloud, network, endpoint, identity, application, and data domains, managing technologies including SIEM, EDR, IAM, and vulnerability management. Serve as the designated backup to the Head of Information Security, providing leadership continuity during CISO absence and supporting regulatory, audit, and risk assessments. Participate in incident response activities, including after-hours events, and lead technical response efforts for significant security events. Mentor technical teams, partner with infrastructure and business leaders to ensure security-by-design principles, and develop controls for prompt security, model governance, and secure AI deployment.
Required Qualifications
- Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or related field
- 5+ years of progressive cybersecurity experience
- 2+ years of leadership experience managing technical security teams
- Strong engineering background with hands-on experience designing and implementing security solutions
- Experience with cloud security platforms including Azure, AWS, and hybrid environments
- Experience securing modern identity platforms, endpoint management solutions, application environments, APIs, and SaaS platforms
- Demonstrated incident response leadership experience
- Direct experience securing AI, Generative AI, Machine Learning, Agentic AI, or similar AI ecosystems
- Experience implementing AI governance and AI risk management frameworks
- Experience within banking, financial services, or other highly regulated industries
- Knowledge of FFIEC, NIST CSF, ISO 27001, ISO 42001, and related cybersecurity standards
- CISSP
- CCSP
- GIAC (GSEC, GCIH, GCIA, GMON, or similar)
- SABSA
- AWS Security Specialty
- Microsoft Cybersecurity Architect Expert (SC-100)
- Certified AI Security Practitioner (CAISP) or equivalent AI security certification
- Strategic thinker who remains technically hands-on
- Strong communicator capable of engaging executives, auditors, regulators, and engineers
- High degree of ownership and accountability
- Calm and decisive during cyber incidents and crisis situations
- Collaborative leader who builds trust across teams
- Flexible, adaptable, and willing to operate as both a senior leader and a working manager when required
- Must be able to lift 50 lbs
Desired Qualifications
- Preferred Certifications, one or more of: CISSP, CCSP, GIAC (GSEC, GCIH, GCIA, GMON, or similar), SABSA, AWS Security Specialty, Microsoft Cybersecurity Architect Expert (SC-100), Certified AI Security Practitioner (CAISP) or equivalent AI security certification
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.