Head of Security & Trust Engineering
Palo Alto, US
EarnIn
EarnIn is an app that gives you access to the pay you've earned - when you want it. Get paid for the hours you've worked without waiting for payday.ABOUT EARNIN
As one of the first pioneers of earned wage access, our passion at EarnIn is building products that deliver real-time financial flexibility for those with the unique needs of living paycheck to paycheck. Our community members access their earnings as they earn them, with options to spend, save, and grow their money without mandatory fees, interest rates, or credit checks.
We’re fortunate to have an incredibly experienced leadership team, combined with world-class funding partners like A16Z, Matrix Partners, DST, Ribbit Capital, and a very healthy core business with a tremendous runway. We’re growing fast and are excited to continue bringing world-class talent onboard to help shape the next chapter of our growth journey.
POSITION SUMMARYSecurity and trust Engineering are critical to EarnIn's STEPS (Security, Technology Enablement, and Platform Services) organization. They ensure that our products and platforms are secure, resilient, and trusted by millions in a fast-paced industry. This team has domain responsibilities for cybersecurity detection and response, security engineering, product security, consumer identity and access management (CIAM), and trust engineering.
As the Senior Director of Information Security, you will lead the development and execution of comprehensive security strategies that align with EarnIn’s mission and goals. You will lead globally distributed teams and collaborate closely with other company leaders. You will shape and execute a comprehensive security strategy, driving innovation and aligning security initiatives with business goals. Your work will enable secure, seamless financial experiences for our community members and uphold our commitment to trust and integrity.
This full-time position is based in Palo Alto (Headquarters) and requires at least three days a week in the office. The salary range for this position is $360,500 - $440,600 + equity + benefits. Our salary ranges are determined by role, level, and location.
WHAT YOU'LL DOStrategic Leadership
- Define and Execute Strategy: You will develop and implement a forward-looking security strategy tailored to EarnIn's unique challenges, ensuring alignment with business priorities and regulatory requirements.
- Drive a Security-First Culture: You will champion security as a core pillar of our products & services, fostering awareness and accountability across the organization.
People and Team Leadership
- Inspire and Lead: You will build and lead high-performing teams, empowering them to tackle complex security challenges and deliver impactful results.
- Mentor and Develop Talent: You will invest in your team’s growth and foster a culture of continuous learning, innovation, and accountability.
Manage Resources Effectively: You will oversee budgets, allocate resources strategically, and optimize vendor partnerships.Detection and Response
- Lead Detection and Response: You will oversee advanced threat detection and incident response programs, ensuring rapid identification, containment, and resolution of security incidents.
- Enhance Threat Intelligence: You will build and maintain robust threat intelligence capabilities to stay ahead of evolving risks and bad actors targeting our community members and our business.
- Strengthen Incident Response: You will continuously refine incident response processes and tools to improve efficiency and reduce risk & exposure to EarnIn.
Security Engineering
- Build Secure Systems: You will lead the design and implementation of secure cloud infrastructure, ensuring resilience against attacks while enabling scalability and innovation.
- Scaling Security Organization: You will drive automation initiatives to improve the efficiency and effectiveness of security-related processes.
- Collaborate Across Teams: You will collaborate closely with all EarnIn teams to embed security best practices into all aspects of our business.
Product Security
- Secure Products: You will ensure our products and services meet the highest security standards, integrating security throughout the product development lifecycle.
- Proactively Reduce Risk: You will lead efforts to identify and mitigate vulnerabilities and security weaknesses in our products before they impact our community members.
- Ensure Compliance: You will partner with compliance teams to align product security with regulatory frameworks such as PCI-DSS, SOC2, NIST, and other industry standards.
Consumer Identity Engineering
- Innovate Identity Solutions: You will develop secure, frictionless authentication and identity verification solutions that enhance consumer trust and experience.
- Lead Collaboration: You will partner with product teams to deliver innovative, secure financial experiences.
Trust Engineering
- Safeguard Customer Privacy: You will develop consumable solutions to ensure that our products & services comply with privacy laws while protecting sensitive customer data.
- Ensure Data Integrity: You will lead initiatives to protect data integrity, confidentiality, and availability throughout the organization.
WHAT WE'RE LOOKING FOR
- Leadership: You have built and grown globally distributed and high-performing teams.
- Cybersecurity Experience: You have 10+ years of progressive cybersecurity leadership experience in the fintech industry and high velocity product companies.
- Product Experience: You have 5+ years of demonstrated experience to deliver customer-centric products and services.
- Expertise: You bring deep knowledge of security frameworks (e.g., NIST CSF, NIST 800-53, ISO/IEC 27001/27002, etc.), cloud security, SecDevOps, and product engineering.
- Skills: You excel at strategic thinking, problem-solving, and driving cross-functional alignment in a complex, dynamic environment.
- Certifications: Preferred certifications include CISSP, CISM, or GIAC.
At EarnIn, we believe that the best way to build a financial system that works for everyday people is by hiring a team that represents our diverse community. Our team is diverse not only in background and experience but also in perspective. We celebrate our diversity and strive to create a culture of belonging. EarnIn does not unlawfully discriminate based on race, color, religion, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), gender identity, gender expression, national origin, ancestry, citizenship, age, physical or mental disability, legally protected medical condition, family care status, military or veteran status, marital status, registered domestic partner status, sexual orientation, genetic information, or any other basis protected by local, state, or federal laws. EarnIn is an E-Verify participant.
EarnIn does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job postings. No fee will be paid to third parties who submit unsolicited candidates directly to our hiring managers or HR team.
#LI-Hybrid
Tags: Automation CISM CISSP Cloud Compliance FinTech GIAC IAM Incident response NIST NIST 800-53 Privacy Product security Security strategy SOC 2 Strategy Threat detection Threat intelligence Vulnerabilities
Perks/benefits: Career development Equity / stock options Startup environment
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.