Technical Lead - InfoSec & AI Platform

Technical Lead - Info Sec & AI Platform

Information Security | AI Governance | Platform Architecture

Department Technology Classification Full-Time 100% Onsite Charlotte, NC

Core Focus Info Sec and AI Platform

Reports To Technical Program Director

Role Scope Technical Lead

Status About the Role

Dingo Blu is scaling from pre-launch build-out into a live, regulated neo bank, and its security, AI, and platform foundations need an owner who can run independently. This role formalizes work already underway: the Info Sec program, our emerging AI stack and AI adoption across the company, and the platform/integration architecture connecting Dingo Blu to its providers. You’ll report to the Technical Program Director as the technical owner driving the roadmap — not the analyst executing someone else’s checklist.

Information security remains the core of the role; AI strategy and platform architecture are extensions of that mandate. Most of Dingo Blu’s AI and platform decisions carry security and compliance implications, and this role is where those threads meet.

• Own the Info Sec, AWS, and identity/endpoint security policy set — draft, review, and maintain with leadership and the external security partner
• Drive the compliance runway (SOC 2, PCI-DSS, NIST CSF) — gap analysis, audit-ready evidence, and the security/compliance work processes and tracking
• Own vendor and provider security review (third-party risk management) across identity, endpoint, network, and cloud tooling, including new-tool evaluation
• Define and drive identity, endpoint, and incident response operations — SSO, EDR, alert routing, triage and escalation
• Maintain the application/asset inventory and own the launch-readiness security checklist as scope and timeline evolve
• Lead the inventory and management of externally facing product documentation (privacy policy, terms, in-app legal/policy docs) to maintain compliance

• Own Dingo Blu’s tiered AI stack strategy — broad usage, R&D tooling, governance/compliance platforms, cloud governance — and vet new AI tools against cost, security, and regulatory fit
• Design and evolve the AI Dev Pipeline (CI, security scanning, infra provisioning, AI-assisted development), identifying where guardrails are needed
  
  Draft and maintain the AI usage guideline, driving AI adoption across the teams
• Track AI-relevant regulatory developments in a regulated fintech environment and flag implications early

• Partner with engineering and product on integrations, APIs, and dev-pipeline architecture and methodology, bringing security and AI-governance judgment into design decisions
• Maintain visibility into the provider/vendor roadmap and translate it into a security- and compliance-aware technology roadmap
• Represent security, AI, and platform considerations in cross-functional planning with Ops, Product, and Tech, supporting launch and future releases

• 8+ years in a technical role spanning security, cloud/platform engineering, or software delivery, with hands‑on ownership of a security or compliance function
• Demonstrated experience turning ambiguous, fast‑moving requirements into documented, adoptable policy and process
• Working fluency in AWS (IAM, logging, security tooling) and modern identity/endpoint stacks (SSO, EDR)
• Exposure to compliance frameworks (SOC 2, PCI-DSS, NIST CSF, ISO 27001), and genuine fluency adopting and governing AI tools and platforms
• Clear written and verbal communication — this role writes policy, presents tradeoffs to leadership, and partners daily with engineering
• Certifications:
  
  Security+, AWS certifications, or similar are a plus — Dingo…