Director, Security Assurance and Compliance

Remote · Boston · Posted Sep 28, 2026

At a glance

The Director, Security Assurance and Compliance will lead the transition toward engineered, proactive compliance for a payments and lending platform.
This role operates as an independent second line of defense, balancing rigorous assurance with engineering pragmatism to scale through automation.
The position involves driving continuous controls monitoring, managing enterprise risk, and maintaining the evidence base for customer trust and sales enablement.

Build and own continuous controls monitoring, automated evidence collection, and compliance-as-code initiatives.
Manage overall organizational security risk, third-party and vendor risk, and business continuity and disaster recovery governance.
Maintain and safeguard the independent evidence base underlying the Trust Center and customer security reviews.
Act as an independent reviewer with the authority to challenge engineering and operational teams.
Mentor and upskill the security compliance organization in the transition from manual auditing to automated compliance engineering.

Experience leading a security assurance or risk transformation program.
Strong technical command of PCI, SOC, SOX, and ISO frameworks.
Demonstrated success implementing automated controls and continuous evidence collection.
Ability to balance regulatory rigor with engineering constraints.
Proven track record leading a team of security, risk, or compliance professionals.

Background in payments, fintech, or another highly regulated platform business.
Direct experience operating within a two-lines-of-defense governance structure.
Experience scaling automated compliance architecture within fast-growing cloud environments.