Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 24 hours ago

Director of Security & Risk

SentiLink41 open roles

Pay
$200,000 – $260,000 a year
Where
United States
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDirector of Security & RiskSentiLink · United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SentiLink's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.6% of postings close within 7 days. Measured by our own scanner across the market. SentiLink postings stay open a median of 64 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 13.6%7 days
  4. 21.9%14 days
  5. 36.9%30 days
  6. 59.0%60 days
This job: posted 24 hours ago

SentiLink median: 64 days open

The posting

SentiLink https://www.sentilink.com/ helps institutions and protects customers by accurately resolving identities and flagging fraud risk. Each day, we verify more than 3 million identities, flagging 150k+ fraud attempts in the process. The problems we work on are challenging, and solving them takes deep domain expertise, rigorous analysis, and a willingness to dig into the details.

At SentiLink, you'll work alongside smart, highly collaborative colleagues who respect each other's time and judgment, take ownership, and follow through on their commitments. Together, we do truly meaningful work protecting the identities of innocent consumers and flagging the fraudsters attempting to exploit them.

We're well capitalized and growing quickly. We already serve 13 of the top 15 U.S. banks, we're expanding into new markets, and we're backed by Craft Ventures, Andreessen Horowitz, NYCA, and Max Levchin. We've been named to the Forbes Fintech 50 https://www.forbes.com/companies/sentilink/?list=fintech50 and as a 2026 FICO Industry Vanguard Decision Award Winner https://www.businesswire.com/news/home/20260330439998/en/SentiLink-Named-a-2026-FICO-Industry-Vanguard-Decision-Award-Winner-for-Leadership-in-Identity-Theft-Detection. We were also the first company to go live https://resources.sentilink.com/blog/sentilink-makes-history-as-first-ecbsv-provider with the electronic Consent Based Social Security Number Verification (eCBSV) service, and we've testified before the U.S. Congress https://resources.sentilink.com/media/dr.-david-maimons-congressional-testimony-on-emerging-fraud-threats-and-the-evolving-fraud-landscape on the future of identity.

We want SentiLink to be the best place you've ever worked. We offer generous benefits and support a range of working arrangements, from fully remote to in-office. We are a digital-first company with strong collaboration across the U.S. and India, and we meet in person regularly to build relationships. We have offices in Austin, San Francisco, New York City, Seattle (Bellevue), Los Angeles, and Chicago in the U.S., and in Gurugram (Delhi) and Bengaluru in India.

ROLE:

SentiLink's Information Security team is responsible for protecting our systems, data, and customers while enabling the business to operate securely and efficiently. We work closely with Engineering, IT, Legal, Product, and business teams to manage security risks, maintain regulatory compliance, and build effective security controls across the organization.

We're looking for a Director of Security & Risk to lead our security governance, compliance, assurance, and risk management programs. This is a leadership role with broad ownership across FedRAMP, SOC 2, PCI DSS, customer and partner security assessments, third-party risk, and security policy.

This is not a traditional GRC role. SentiLink operates a highly technical, AWS-based environment, and many of the risks and compliance requirements we manage require deep technical understanding. We're looking for someone who can independently evaluate technical risks, understand security architecture and proposed remediations, and work effectively with engineers, auditors, regulators, and business stakeholders.

You will lead and develop a team of security and compliance professionals, establish priorities, identify gaps in our existing programs, and develop a roadmap for improving our security posture. We expect you to bring the experience and judgment to identify problems and opportunities independently, rather than simply execute an existing plan.

You will report to SentiLink's security leader and work closely with Security Engineering, which remains a separate function responsible for technical security architecture and implementation.

Success in this role means building a proactive, effective, and scalable security program that goes beyond passing audits to meaningfully reducing organizational risk.

This is a remote, US-based position.

RESPONSIBILITIES:

- Lead and develop SentiLink's security governance, risk, and compliance organization. Manage and mentor security and compliance professionals, evaluate program effectiveness, identify gaps in expertise and capacity, and develop organizational and hiring plans as the company grows.

- Own SentiLink's security compliance and audit programs, including FedRAMP, SOC 2, and PCI DSS. Lead external assessments, manage control effectiveness and evidence collection, oversee Vanta and compliance automation, and ensure the organization continuously meets its obligations rather than preparing only for periodic audits.

- Drive the ongoing maturity of SentiLink's government security program. Oversee FedRAMP continuous monitoring, POA&M governance, change-management compliance, agency-specific requirements, and assessment readiness. Anticipate evolving requirements, including FedRAMP 20x, and develop plans to address them.

- Establish and operate a rigorous security risk management program. Own the identification, assessment, documentation, escalation, and treatment of security risks, control deficiencies, and exceptions. Ensure material risks receive appropriate attention and that remediation is tracked through completion.

- Lead SentiLink's third-party security risk management program. Establish and enforce risk-based vendor diligence requirements, improve assessment quality, manage ongoing vendor oversight, and ensure material security concerns are resolved or appropriately escalated before approval.

- Own customer and partner security assurance. Lead complex security assessments and audits from financial institutions, government agencies, and other partners. Evaluate contractual security requirements in collaboration with Legal, coordinate technical responses, and ensure security representations are accurate, complete, and defensible.

- Own security policy and control governance. Maintain security policies, standards, and control frameworks, ensuring requirements are appropriately mapped across regulatory obligations, reflected in actual operations, and periodically evaluated for effectiveness.

- Continuously improve the effectiveness and scalability of security programs. Develop clear accountability, measurable outcomes, repeatable processes, and automation. Proactively identify emerging risks and requirements, communicate recommendations to leadership, and drive improvements across organizational boundaries.

REQUIREMENTS:

- 10+ years of experience in information security, including significant experience leading security governance, compliance, assurance, or risk management programs.

- Demonstrated experience owning major security compliance and assurance programs such as FedRAMP, SOC 2, PCI DSS, or comparable regulatory frameworks, including direct engagement with auditors, assessors, and external stakeholders.

- Strong technical understanding of modern cloud infrastructure, SaaS application security, identity and access management, vulnerability management, and security architecture. Ability to independently evaluate technical findings, control designs, and remediation approaches.

- Proven ability to build and improve security programs, independently identify control gaps and emerging requirements, establish priorities, and translate security risks into actionable organizational plans.

- Experience managing and developing security professionals, establishing high standards for quality and accountability, and leading programs across distributed teams.

- Experience with third-party risk assessments, customer security diligence, and security risk management, including the ability to evaluate complex technical and contractual security requirements.

- Strong written and verbal communication skills, sound judgment, and the ability to influence engineering teams, business leaders, auditors, and external stakeholders without relying solely on formal authority.

COMPENSATION:

$200,000/year - $260,000/year + equity + benefits

Note: This salary range may be inclusive of several career levels, and the actual base salary within that range will be determined by several components including but not limited to the individual's experience, skills, and qualifications.

PERKS:

- Employer paid group health insurance for you and your dependents

- 401(k) plan with employer match (or equivalent for non US-based roles)

- Flexible paid time off

- Regular company-wide in-person events

- Home office stipend, and more!

CORPORATE VALUES:

- Follow Through

- Deep Understanding

- Whatever It Takes

- Do Something Smart

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SentiLink's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SentiLink's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SentiLink's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.