Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Information Security Lead role.

Rezi rewrites your resume against Nova Credit's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Information Security Lead posting at Nova Credit — free, in seconds.

About the Role

As Nova Credit’s Information Security Lead, you will be a hands-on, all-rounder security practitioner at the heart of our InfoSec function. You will partner closely with the Director of Information Security to mature our security program, moving fluidly between deep-in-the-weeds technical work and Governance, Risk, and Compliance (GRC) work. This role is built for someone who is happy doing both, bringing an engineer’s instinct for solving security problems and the practitioner’s patience for questionnaire and audit work. You will work cross-functionally with the rest of the company, while owning meaningful technical and program-level initiatives from your first quarter.

Responsibilities

Develop a working understanding of Nova Credit’s products, AWS-based infrastructure, and security-relevant data flows.
Familiarize yourself with control sets, frameworks, policies (SOC 2 Type II, ISO 27001, internal standards), and customer-facing security commitments.
Get hands-on with security tooling stack, EDR, MDM, SSO/IAM, DLP, cloud security posture management.
Shadow incoming customer security questionnaires and due diligence reviews.
Pick up hands-on tickets, such as endpoint hardening, MDM tuning, IAM cleanup, or evidence collection.
Meet stakeholders across the company.
Own customer security questionnaires and due diligence reviews end-to-end.
Configure, tune, and operate security tooling across the stack (EDR, MDM, SSO/IAM, DLP, Google Workspace settings).
Triage and respond to security alerts, bug bounty reports, and internal escalations; document repeatable response runbooks.
Contribute to third-party risk reviews of new and existing critical vendors.
Surface and propose fixes for identified process gaps or control weaknesses.
Own an agreed-on slice of Nova Credit’s security program end-to-end (e.g., IAM/SSO, endpoint and MDM, vulnerability management, customer-trust/questionnaire program, or third-party risk) with clear, measurable outcomes.
Drive at least one significant hardening or modernization initiative.
Be a go-to internal expert for technical security questions from Engineering, Product, and Data Science.
Partner with the Director of Information Security on roadmap, prioritization, and scaling the Information Security program.

Requirements

3–6+ years across information security, security engineering, cloud security, or technical GRC roles.
At least some time in a high-growth fintech, financial services, or regulated SaaS environment.
Comfortable configuring and operating modern security tooling such as EDR, MDM, SSO/IAM, DLP, and cloud security tooling.
Working knowledge of AWS security, IAM, networking, KMS, logging, and common misconfiguration risks.
Ability to reason about real architecture and identify risks.
Solid grasp of networking, identity, cryptography, secure SDLC, and web application security.
Understanding of how attackers think.
Direct experience with SOC 2 Type II and ISO 27001 are a plus.
Ability to explain technical risks to engineering team members.
Ability to write a clean policy.
Ability to disagree productively with an Engineering lead.
Willingness to dig into a misconfigured IAM policy and fill out a 200-question bank questionnaire.
Do not silo work into 'technical' and 'non-technical'.

Skills

Information Security
Security Engineering
Cloud Security
Technical GRC
Fintech
Financial Services
Regulated SaaS
EDR
MDM
SSO/IAM
DLP
Cloud Security Tooling
Jamf
SentinelOne
Okta
AWS Security
AWS IAM
AWS Networking
AWS KMS
AWS Logging
Networking
Identity
Cryptography
Secure SDLC
Web Application Security
SOC 2 Type II
ISO 27001
Communication
Policy Writing
Risk Assessment

Location

United States

Work Type

Full-time

Experience Level

3-6+ years

Salary/Compensations

$118,400 - $140,600 USD per year

Benefits

Flexible PTO
Tenure rewards
Comprehensive and generously subsidized medical, dental, and vision insurance options
Company-sponsored 401k plan
Parental leave of absence
Sick time off
Paid time off vacation

About the Company

Nova Credit is a credit infrastructure and analytics company that enables businesses to grow responsibly by harnessing alternative credit data.
The company leverages its unique data infrastructure, industry-leading analytics & FCRA-compliance to help lenders fill in the gaps that exist in traditional credit analytics.
Nova Credit provides access to the fragmented universe of consumer financial data and transforms it into compliant, actionable risk analytics through a suite of solutions designed to increase conversion through expanded coverage, speed, and reliability.
Nova Credit supports over 7,000 businesses including organizations such as HSBC, SoFi, Scotiabank, AppFolio, and Yardi.
Named in Forbes’ Fintech 50 in 2025 and Built In’s Best Places to Work, 2025.

Equal Opportunity

Everyone is welcome at Nova Credit.
We are an equal-opportunity employer where diversity and inclusion are central pillars of our company strategy.
We seek applicants who understand, embrace, and thrive in a multicultural and globalized world.
We do not discriminate on the basis of any protected class, including race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
We encourage all qualified candidates, including those with a criminal history, to apply.