Head of Information Security (CISO) at Mission Lane

, , United States -

Full Time

Start Date

Immediate

Expiry Date

21 Apr, 26

Salary

239979.0

Posted On

21 Jan, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Security, Cyber Risk Management, Leadership, Compliance, Risk Management, Cloud Security, AWS, GCP, Incident Response, Business Continuity, Data Protection, Identity and Access Management, Security Architecture, DevSecOps, Communication, Stakeholder Management

Industry

Financial Services

Description

Mission Lane is combining the power of data, technology, and exceptional service to pave a clear way forward for millions of people on the path to financial success. By attracting top talent and leveraging cutting-edge technology, we’re enabling people to unlock real financial progress. Sound like a mission you can get behind? About the role We’re looking for a detail-oriented problem-solver, collaborative relationship-builder, and expert cybersecurity leader to join our Risk & Compliance team as the Head of Information Security (CISO). As the Head of Information Security (CISO): You will be the senior-most leader responsible for defining, implementing, and overseeing our enterprise-wide information security and risk management strategy. This is a critical leadership position that requires a strong balance of technical expertise, business acumen, and regulatory knowledge, particularly within the highly regulated financial services sector. You will report directly to the CTO and serve as a key advisor to the executive team and Board of Directors on all matters related to cyber risk. Strategy & Leadership Develop, own, and continually refine the comprehensive Information Security and Cyber Risk Management strategy and roadmap for the company, aligning it with business goals and regulatory requirements. Lead, mentor, and scale a high-performing security organization, fostering a culture of security-first thinking across all departments. Manage the security budget, technology investments, and vendor relationships to ensure cost-effective and robust security controls. Risk Management & Compliance (Fintech Focus) Establish and maintain an enterprise-wide risk management framework to identify, assess, and prioritize security risks across the technology stack and business operations. Ensure rigorous compliance with all relevant financial regulations and standards (e.g., PCI DSS, SOC 2, ISO 27001, CCPA, CSF/NIST, and any specific regional financial regulatory bodies). Oversee all security audits, compliance assessments, and regulatory examinations, and manage the timely remediation of findings. Collaborate with the legal, compliance and privacy functions to conduct reviews/audits, RFPs, recommend policies and procedures, monitor status and report violations to appropriate management. Security Operations & Architecture Define and govern the security architecture for our cloud-native environment [AWS/GCP]. Implement and manage a robust set of security tools and technologies (SIEM, Endpoint Detection & Response, Vulnerability Scanners, Firewalls, Data Loss Prevention, etc.). Champion DevSecOps principles, partnering closely with Engineering to embed security controls (SAST, DAST, SCA) into the CI/CD pipeline and Software Development Lifecycle (SDLC). Oversee all aspects of data protection, identity and access management (IAM), and network security. Incident Response & Business Continuity Develop, test, and lead the Security Incident Response Plan (SIRP), ensuring the team can rapidly detect, contain, and recover from security incidents. Manage the Disaster Recovery (DR) and Business Continuity Plan (BCP) efforts to ensure business resilience. Communication & Stakeholder Management Provide clear, concise, and regular reporting on the organization's security posture, key risks, and security metrics to the Executive Team and Board of Directors. Serve as the key security subject matter expert across the organization to implement changes and best practices to continuously improve the security posture of the enterprise. Represent the organization with external stakeholders to confidently articulate our security controls. Minimum Qualifications 5 - 10 years of progressive experience in Information Security and Cyber Risk Management, with at least 3-5 years in a senior leadership role (Director, VP, or CISO). Demonstrable experience working within the Fintech or a closely regulated financial services industry is required. Deep expertise in regulatory frameworks relevant to financial data (PCI DSS, ISO 27001, SOC 2, or similar). Proven hands-on experience securing modern, cloud-native environments (e.g., AWS, GCP). Exceptional leadership, communication, and interpersonal skills, with the ability to influence technical teams, executive management, and external stakeholders. Bachelor's degree in Computer Science, Information Technology, or a related field. Preferred Qualifications Advanced degree (e.g., Master's in a relevant field or MBA). Relevant professional certifications (e.g., CISSP, CISM, CRISC, CISA). Experience with advanced security techniques such as offensive security/penetration testing and threat intelligence. Familiarity with securing high-velocity workflows and microservices architecture. Compensation USD Target Base Range: $215,831 - 239,979 Additional compensation in the form(s) of participation in our annual incentive program and equity are dependent on role. Pay is based on factors such as work experience, education, certification(s), training, skills, and competencies related to the role. Mission Lane also offers a comprehensive benefits plan, which includes unlimited paid time off, 401(k) match, a monthly wellness stipend, health/ dental/ vision insurance options, disability coverage, paid parental leave, flexible spending account (for childcare and healthcare), life insurance, and a remote-friendly work environment. About Mission Lane: Founded in December 2018, Mission Lane is a purpose-driven fintech company based in the U.S., with headquarters in Richmond, Virginia. It all started with a realization: nearly fifty percent of the adult population in the U.S. doesn’t have access to a clear line of credit. Most traditional credit card companies either overlook or overcharge this group because they have less-than-perfect credit scores or no scores at all. We decided this just wouldn’t do. In partnership with our sponsor banks, we offer credit cards under the Mission Lane brand name, with better, clearer terms, and a more refined customer experience than the alternatives available to people working hard to improve their credit. To date, over four million consumers have chosen Mission Lane, earning high customer ratings on Credit Karma for its market segment and industry leading Net Promoter scores. Mission Lane has cumulatively raised over $600 million of equity from leading investors, including Invus Opportunities, QED Investors, LL Funds, funds affiliated with Oaktree Capital Management, and other leading investors. Our commitment to a workplace built on respect and dignity is guided by our core value of Unity. We believe that everyone plays a vital role in our shared purpose, and we actively cultivate an environment where all individuals have the opportunity to do their best work. By fostering a culture of empathy and collaboration, we create a strong sense of belonging and support for every team member. Mission Lane is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, or any other protected status. Mission Lane provides reasonable accommodations to applicants who need them for medical or religious reasons, as required by law. Applicants can initiate an accommodation request by contacting peopleexperience@missionlane.com. Mission Lane is not sponsoring new applicant employment authorization and please, no third-party recruiters. Application Integrity: Our cardholders trust us with their financial well-being, and this trust starts with the integrity of the people on our team. We're looking for team members who share our dedication to transparency and truth. Please verify that the information in your application is accurate and complete. Providing any information to Mission Lane that is not completely truthful at any point during the application or hiring process may result in removal from the hiring process, disqualification from future opportunities, withdrawal of an offer or other sanctions for candidates and, in addition for employees, disciplinary action, up to and including termination of employment.

Responsibilities

The Head of Information Security (CISO) will define, implement, and oversee the enterprise-wide information security and risk management strategy. This role involves leading a security organization and ensuring compliance with financial regulations.