VP of Cybersecurity & Information Security

Base Salary Range

USD $ - USD $ /Yr. Overview

Since 1927, the Mariner Finance family of companies has provided customers with creative, flexible, and convenient lending options. Headquartered in Baltimore, Mariner Finance operates coast‑to‑coast with physical locations in over half the states. With a growing number of employees, superior customer service remains the cornerstone of our business, and we pride ourselves in delivering a variety of loans with an enhanced focus on exceptional service.

We work with customers to find options that are beneficial to their specific needs, which is why we are recognized by our customers as one of the community’s consumer finance companies of choice.

Benefits:

For information regarding our benefits, please visit:

All full‑time employees are provided with a generous benefits package in addition to their monetary compensation. Learn more about it today.

In this role, you will…

Be responsible for leading the organization’s Cybersecurity and Information Security functions, including Security Engineering & Operations and IT Risk & Compliance. Provide strategic and operational leadership to protect enterprise systems, data, identities, cloud environments, platforms, and business processes while ensuring the company’s security program aligns with business priorities, risk appetite, regulatory requirements, and the evolving threat landscape.

Build and lead a metric‑driven security organization focused on risk reduction, control effectiveness, incident response, identity security, cloud and platform security, regulatory compliance, automation, and continuous improvement. Oversee security technologies, threat monitoring, identity and access controls, cloud security architecture, audits, remediation efforts, vendor performance, and executive reporting while partnering across IT, engineering, development, platform, and business functions to embed secure‑by‑design practices into systems, processes, product delivery, and business decision‑making.

Responsibilities and Duties:

• Lead and manage Cybersecurity and Information Security functions, including Security Engineering & Operations and IT Risk & Compliance.
• Serve as a key advisor to senior leadership on matters of strategic and operational security importance, influencing decision‑making and driving proactive initiatives that strengthen the company’s security posture, risk management practices, regulatory compliance, and business resilience.
• Develop and execute Cybersecurity and Information Security strategies aligned with business goals, risk appetite, regulatory requirements, and the evolving threat landscape.
• Build and operate a metric‑driven Cybersecurity and Information Security organization, defining KPIs that measure risk reduction, control effectiveness, operational performance, incident response, identity security, cloud security, and compliance posture.
• Oversee security engineering teams responsible for security platforms, tooling, architecture, and integrations across endpoint, network, cloud, identity, and platform environments.
• Manage security operations, including threat monitoring, event detection, incident response, investigations, and continuous improvement of detection and response capabilities.
• Oversee identity security capabilities, including identity and access management, privileged access management, identity governance, Zero Trust initiatives, and privileged access controls.
• Oversee cloud and platform security capabilities, including cloud security architecture, Dev Sec Ops  enablement, infrastructure‑as‑code security, container/runtime security, and partnership on cloud governance.
• Partner with enterprise engineering, development, platform, and technology teams to integrate security into the software development lifecycle, enable secure engineering practices, support shared platform governance, and drive secure‑by‑design delivery.
• Stay abreast of the evolving threat landscape, emerging attack vectors, and advancements in security technologies, continuously adapting the organization’s security posture.
• Advise technology, development, engineering, and business partners on security best practices,…