Senior Security Lead

Job description

At Lendbuzz, we believe financial opportunity should be more personalized and fair. We develop innovative technologies that provide underserved and overlooked borrowers with better access to credit. From our employees to our dealers, partners, and borrowers, we’ve built a company and a culture around a resolute belief in the promise and power of diversity. We value independent and critical thinking. We're looking for a Senior Security Lead to partner closely with our CISO in driving Lendbuzz's security strategy and running the day-to-day of the security function. You'll own the execution of key initiatives, keep the security program on track, and work with senior stakeholders across the company to make security part of how we build and operate. This role suits someone who combines strong technical depth with excellent communication skills and strong project management capabilities. You'll have broad scope, high visibility, and a direct impact on how security works at Lendbuzz. ### Key Responsibilities: - Partner with the CISO on Lendbuzz's security strategy and roadmap, and own the execution of key initiatives - Help run the day-to-day of the security function: priorities, planning, tracking, metrics and follow-through - Translate business objectives into scalable security programs and controls - Act as a key stakeholder in security governance, risk management and decision-making - Work with senior leaders across Engineering, Infrastructure, Product, Legal, Compliance and Business teams to align on security priorities and drive cross-functional initiatives - Support regulatory, audit and customer security requirements, keeping security aligned with business goals and commitments - Drive the adoption of AI, automation and emerging technologies to improve security effectiveness and efficiency - Foster a culture of accountability, operational excellence and security ownership across the organization ### Requirements: - 8+ years of experience in Information Security, Cyber-security or Security Engineering - Proven experience leading security programs or initiatives in large-scale, high-growth organizations - Strong background across multiple security domains, including Security Engineering, Security Operations, Cloud Security, Incident Response, Vulnerability Management and Governance - Extensive experience securing cloud-native environments (AWS, GCP and/or Azure) - Deep understanding of security architecture, security controls and modern security technologies - Experience with regulatory frameworks, audits, compliance programs and risk management - Excellent communication skills. You write and present clearly to senior stakeholders and can explain technical risk in business terms. - Highly organized, with sound judgment and a strong sense of ownership - Fluent English, with experience working with global teams and international stakeholders ### Nice-to-Have: - Experience in fintech, financial services or highly regulated environments - Experience leading AI security or security automation initiatives - Hands-on experience with modern security platforms such as CrowdStrike, Wiz, Okta, SIEM and identity solutions - Certifications such as CISSP, CISM, CCSP, CRISC or equivalent - Experience building and scaling security teams