Director of Security & Risk

Senti Link helps institutions and protects customers by accurately resolving identities and flagging fraud risk. Each day, we verify more than 3 million identities, flagging 150k+ fraud attempts in the process. The problems we work on are challenging, and solving them takes deep domain expertise, rigorous analysis, and a willingness to dig into the details.

At Senti Link, you'll work alongside smart, highly collaborative colleagues who respect each other's time and judgment, take ownership, and follow through on their commitments. Together, we do truly meaningful work protecting the identities of innocent consumers and flagging the fraudsters attempting to exploit them.

We're well capitalized and growing quickly. We already serve 13 of the top 15 U.S. banks, we're expanding into new markets, and we're backed by Craft Ventures, Andreessen Horowitz, NYCA, and Max Levchin. We've been named to the Forbes Fintech 50 and as a 2026 FICO Industry Vanguard Decision Award Winner. We were also the first company to go live with the electronic Consent Based Social Security Number Verification (eCBSV) service, and we've testified before the U.S. Congress on the future of identity.

We want Senti Link to be the best place you've ever worked. We offer generous benefits and support a range of working arrangements, from fully remote to in-office. We are a digital-first company with strong collaboration across the U.S. and India, and we meet in person regularly to build relationships. We have offices in Austin, San Francisco, New York City, Seattle (Bellevue), Los Angeles, and Chicago in the U.S., and in Gurugram (Delhi) and Bengaluru in India.

Senti Link's Information Security team is responsible for protecting our systems, data, and customers while enabling the business to operate securely and efficiently. We work closely with Engineering, IT, Legal, Product, and business teams to manage security risks, maintain regulatory compliance, and build effective security controls across the organization.

We're looking for a Director of Security & Risk to lead our security governance, compliance, assurance, and risk management programs. This is a leadership role with broad ownership across FedRAMP, SOC 2, PCI DSS, customer and partner security assessments, third-party risk, and security policy.

This is not a traditional GRC role. Senti Link operates a highly technical, AWS-based environment, and many of the risks and compliance requirements we manage require deep technical understanding. We're looking for someone who can independently evaluate technical risks, understand security architecture and proposed remediations, and work effectively with engineers, auditors, regulators, and business stakeholders.

You will lead and develop a team of security and compliance professionals, establish priorities, identify gaps in our existing programs, and develop a roadmap for improving our security posture. We expect you to bring the experience and judgment to identify problems and opportunities independently, rather than simply execute an existing plan.

You will report to Senti Link's security leader and work closely with Security Engineering, which remains a separate function responsible for technical security architecture and implementation.

Success in this role means building a proactive, effective, and scalable security program that goes beyond passing audits to meaningfully reducing organizational risk.

This is a remote, US-based position.

• Lead and develop Senti Link's security governance, risk, and compliance organization. Manage and mentor security and compliance professionals, evaluate program effectiveness, identify gaps in expertise and capacity, and develop organizational and hiring plans as the company grows.
• Own Senti Link's security compliance and audit programs, including FedRAMP, SOC 2, and PCI DSS. Lead external assessments, manage control effectiveness and evidence collection, oversee Vanta and compliance automation, and ensure the organization continuously meets its obligations rather than preparing only for periodic audits.
• Drive the ongoing maturity of Senti Link's government security program. Oversee FedRAMP continuous monitoring, POA&M governance, change-management compliance, agency-specific requirements, and assessment readiness. Anticipate evolving requirements, including FedRAMP 20x, and develop plans to address them.
• Establish and operate a rigorous security risk management program. Own the identification, assessment,…