Senior Director, IT Security

Purpose

Access to affordable, reliable transportation is essential to leading productive work and personal lives, caring well for oneself, one’s family, and the needs of others. Through advanced analytics and technology, we can more accurately predict credit risk and provide more people with an affordable auto financing option for their next vehicle. That’s what GLS has done for over 10 years, helping more than half a million families meet and improve their transportation needs.

Join a culture of over 1,000 employees who Care Deeply and Think Boldly, driving innovation in an adaptive and positive culture that celebrates successes. We empower and reward individuals and teams who make direct, positive impacts to the business and each other, who take pride in their work and are ever-raising the bar.

Recognized by Inc 5000 as one of the fastest-growing private companies in America. Join GLS to grow with us!

GLS offers the below great benefits for your amazing work!

• Competitive base pay and performance bonuses, dependent on role
• Medical, dental, vision, telemedicine, supplemental insurance benefits, long-term and short-term disability
• 401K with employer match and 100% immediate vesting
• Paid Time Off (PTO) and paid company holidays to help you balance work and personal life
• Paid Volunteer Time Off (VTO) Annually
• Tuition Reimbursement
• Business casual work environment

The Senior Director, IT Security is responsible for the development, implementation, and oversight of the company's information security program, including cybersecurity operations, technology risk management, regulatory compliance, security controls, and related governance activities. This position partners with business and technology leaders to identify, assess, and mitigate information security risks while supporting organizational objectives, regulatory requirements, and operational effectiveness. The role provides oversight for security initiatives, audit activities, incident response, vendor risk management, and security awareness efforts to help ensure the confidentiality, integrity, and availability of company information assets.

• Develop and maintain the enterprise cybersecurity strategy, operating model, control framework, and multi-year security roadmap aligned to business objectives
• Establish and maintain enterprise security governance processes, standards, policies, risk assessments, control evaluations, and remediation programs
• Provide cybersecurity governance reporting, risk metrics, annual program updates, and material cyber-risk reporting to senior leadership, regulators, auditors, and other external stakeholders
• Lead enterprise cybersecurity incident response, crisis management, investigations, post-incident remediation, and coordination of third-party security events
• Oversee vulnerability management, threat detection, threat intelligence, security monitoring, and security operations capabilities
• Direct implementation and management of security technologies including SIEM, EDR, DLP, IAM, PAM, cloud security, and related cybersecurity platforms
• Serve as the primary security liaison for regulatory examinations, external audits, compliance assessments, and cybersecurity reviews, including evidence collection, artifact management, response coordination, and remediation tracking
• Maintain compliance with applicable regulatory and industry frameworks including GLBA, NYDFS, FTC Safeguards Rule, PCI DSS, NIST CSF, CIS Controls, and other applicable requirements
• Oversee third-party cybersecurity risk management, vendor security assessments, critical service-provider…