Head of Security

About This Opportunity

We are representing a fast-growing, profitable fintech platform in their first dedicated security leadership hire. Our client moves billions of dollars through their systems and has reached a stage where security requires dedicated ownership and strategic vision. This is a rare opportunity to build a security function from the ground up at a company with strong fundamentals, technical rigor, and full executive support.

This is a player-coach role reporting to the VP of Engineering. You'll own the entire security posture—from production infrastructure and code security to access management, incident response, vendor security, and employee security practices. You'll work hands-on early, then define and build the team as needs evolve. Security sits within Engineering intentionally, so you're embedded with the teams whose work you're securing and can drive implementation fast.

Responsibilities

• Own end-to-end security posture across production infrastructure, code security, access and identity, SecOps, monitoring, incident response, vendor management, and policy
• Assess current state, identify gaps, prioritize based on business risk, and implement solutions hands-on
• Build and lead incident response capabilities—ensuring breaches are contained, small, and that the organization knows exactly how to respond
• Drive security as a cultural shift across engineering and the broader organization, working collaboratively to introduce controls that enable rather than block
• Develop and manage AI security posture, enabling safe adoption of AI tooling across the company
• Define staffing needs for the security function and hire your own team as the organization scales
• Partner closely with engineering leadership on production security, threat modeling, and secure development practices

What We're Looking For

• Hands-on security experience at a high-growth company, ideally as an early or first security hire who scaled the function
• Deep expertise in at least one core domain—product/production security, security operations, or access/identity and policy—with strong working knowledge across others
• Engineering mindset: you solve problems with code when appropriate and can navigate a modern stack (Ruby on Rails, TypeScript/React, PostgreSQL, cloud infrastructure)
• Risk-based judgment over compliance checklists—you can articulate actual risk, hold firm lines where needed, and make pragmatic trade-offs aligned with business context
• Strong interpersonal skills and the ability to drive change collaboratively, earning buy-in from engineers and cross-functional stakeholders
• Experience building or co-building a small security team is a strong plus
• Background in fintech, payments, or other regulated industries is a plus

How We Work With You

Candidates apply directly through Get A Job.ai. Our talent team conducts an initial screening to understand your background and confirm fit for the role. We then coordinate interviews with our client and support you through the process. Please do not contact the client directly—all communication flows through our recruiting team to ensure a smooth, professional experience.

Pay

Pay via Get A Job.ai has not been disclosed for this role. Compensation will be discussed during the screening process.

This is a fully remote position available to candidates located in the United States.

Get A Job.ai is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all candidates and employees.