Director, Security Engineering - Hybrid

Irving, TX, United States

Octane® is revolutionizing recreational purchases by delivering a seamless, end-to-end digital buying experience. We connect people with their passions by combining cutting-edge technology and innovative risk strategies to make lifestyle purchases - like powersports vehicles, RVs, and OPE - fast, easy, and accessible.

Octane adds value throughout the customer journey: inspiring enthusiasts with our editorial brands, including Cycle World® and UTV Driver®, instantly prequalifying consumers for financing online, routing customers to dealerships for an easy closing, and supporting customers throughout their loan with superior loan servicing.

Founded in 2014, we're a remote-first company with 550+ employees and over 30 OEM and 4,000 dealer partners.

Octane is currently hiring a technically savvy Director of Security Engineering to build out an innovative, effective and forward leaning security and IT engineering team based in Irving, TX or NYC.

This is a security and IT role in the company requiring mature engineering, technical development and excellent communication skills to evangelize across the entire organization to build security first products, processes, services and culture.The Director will take an assessment of past efforts and evaluate with various stakeholders the state of affairs and then craft a recommendation plan of attack on how to meet our current and future security, technology and risk objectives in the Fintech space. The right person will make recommendations on internal staffing structure and roles to build out the team. This person will be responsible for mentoring and creating educational opportunities for your team to grow in their capabilities. This position is expected to provide communication across the company and work cross functionally with other technical teams such as software engineering, DevOps and Product team in solving their technological needs and driving a culture of shared security responsibility. This Director is the primary driver for the selection of new tools, services or updated security tools and services as we grow. Lastly, this person will own the closing of the gap in our current and future security posture to meet standards like ISO 27001, ISMS, SSAE 18 SOC2 standards and other regulatory standards such as PCI, NYDFS, SOX and FFIEC.

Responsibilities:

Mentor team members, be vested in their growth and development, and monitor other team staffing needs

Engage with 3rd party vendors to determine root cause of problems when appropriate. Design and run reports to catalog and diagnose malfunctions that continue to occur.

Manage IT & Security projects in Jira and be familiar with agile methodologies

Check and confirm the accuracy of the work performed and the methods used by engineering staff

Design and implement innovations that improve project velocity, infrastructure resiliency, security, and data availability while maintaining our existing systems

Respond to outages and security incidents with a timely and efficient resolution and participate in non-office-hours support on-call rotation of production cloud infrastructure and applications

Demonstrate our company cultural values by engaging in diversity of people and ideas, seeking the truth and test assumptions, and ruthlessly prioritizing

Own business outcomes through a balance of speed, creativity, and relentless high bar for quality

Act as the last line of defense for quality control, best practices and effective design strategies

Bring both technical acuity and leadership skills to build a high-performing team

Partner with stakeholders to help your team understand their mission and how they fit in with the overall business goals; define and execute your team's long-term strategy and quarterly roadmap

Requirements: Bachelor's/ Master's degree in Cybersecurity or Computer Science or related degree strongly preferred

10+ years experience in Security, systems or software engineering, 5+ years in a lead or manager capacity and managing geographically dispersed team supporting a hybrid workforce with multiple office locations in different time zones

Growth mindset for self and team

Experienced interacting with senior management; ability to demonstrate critical thinking and thought leadership.

Proven track record of effectively developing direct reports through continual feedback, goal-setting, and growing them through the ranks of an engineering organization

Experience managing teams of 3 direct reports or more

Advanced understanding of modern security, software development practices and methodologies, and the ability to roll up your sleeves and contribute when necessary

Experience directly working on or managing a team working on mission-critical production systems and high-volume applications

Demonstrated ability to attract, identify, and mentor top engineering talent

Security certifications such as CISSP, CISM, GSEC, CCSP, CEH and OSCP

Familiarity and experience with NIST-800, ISO 27001, SSAE18 SOC2 standards

Benefits: Robust Health Care Plans (Medical, Dental & Vision)

Generous Parental Leave

Up to 5 weeks time off (self-managed)

Retirement Plan (401k) with company match!

Educational Assistance/Tuition Reimbursement up to $3K/year

Life Insurance (Basic, Voluntary & AD&D)

Short Term / Long Term Disability

Robust Ancillary benefits including accident insurance, hospital insurance, etc

Gympass Wellness Benefit

Powersports Safety Benefit

Disclaimer : The above statements are intended to describe the general nature and level of work being performed by associates assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.

Octane Lending is an equal opportunity employer committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other protected status with respect to recruitment, hiring, promotion and other terms and conditions of employment.

#LI-MZ1