VP of Cybersecurity & Information Security

Base Salary Range USD $160,000.00 - USD $225,000.00 /Yr. Join Mariner Finance! Since 1927, the Mariner Finance family of companies has provided customers with creative, flexible, and convenient lending options. Headquartered in Baltimore, Mariner Finance operates coast-to-coast with physical locations in over half the states. With a growing number of employees, superior customer service remains the cornerstone of our business, and we pride ourselves in delivering a variety of loans with an enhanced focus on exceptional service. We work with customers to find options that are beneficial to their specific needs, which is why we are recognized by our customers as one of the community’s consumer finance companies of choice. Benefits: For information regarding our benefits, please visit: https://www.marinerfinance.com/careers/benefits/  All full time employees are provided with a generous benefits package in addition to their monetary compensation. Learn more about it today. Job Details In this role, you will... Be responsible for leading the organization’s Cybersecurity and Information Security functions, including Security Engineering & Operations and IT Risk & Compliance. Provide strategic and operational leadership to protect enterprise systems, data, identities, cloud environments, platforms, and business processes while ensuring the company’s security program aligns with business priorities, risk appetite, regulatory requirements, and the evolving threat landscape. Build and lead a metric-driven security organization focused on risk reduction, control effectiveness, incident response, identity security, cloud and platform security, regulatory compliance, automation, and continuous improvement. Oversee security technologies, threat monitoring, identity and access controls, cloud security architecture, audits, remediation efforts, vendor performance, and executive reporting while partnering across IT, engineering, development, platform, and business functions to embed secure-by-design practices into systems, processes, product delivery, and business decision-making. Responsibilities and Duties: Lead and manage Cybersecurity and Information Security functions, including Security Engineering & Operations and IT Risk & Compliance. Serve as a key advisor to senior leadership on matters of strategic and operational security importance, influencing decision-making and driving proactive initiatives that strengthen the company’s security posture, risk management practices, regulatory compliance, and business resilience. Develop and execute Cybersecurity and Information Security strategies aligned with business goals, risk appetite, regulatory requirements, and the evolving threat landscape. Build and operate a metric-driven Cybersecurity and Information Security organization, defining KPIs that measure risk reduction, control effectiveness, operational performance, incident response, identity security, cloud security, and compliance posture. Oversee security engineering teams responsible for security platforms, tooling, architecture, and integrations across endpoint, network, cloud, identity, and platform environments. Manage security operations, including threat monitoring, event detection, incident response, investigations, and continuous improvement of detection and response capabilities. Oversee identity security capabilities, including identity and access management, privileged access management, identity governance, Zero Trust initiatives, and privileged access controls. Oversee cloud and platform security capabilities, including cloud security architecture, DevSecOps enablement, infrastructure-as-code security, container/runtime security, and partnership on cloud governance. Partner with enterprise engineering, development, platform, and technology teams to integrate security into the software development lifecycle, enable secure engineering practices, support shared platform governance, and drive secure-by-design delivery. Stay abreast of the evolving threat landscape, emerging attack vectors, and advancements in security technologies, continuously adapting the organization’s security posture. Advise technology, development, engineering, and business partners on security best practices, architectural patterns, and risk-based decision-making, providing ongoing oversight and guidance. Establish and operate a risk-based cybersecurity program aligned to business priorities, regulatory expectations, and the evolving threat landscape. Oversee the IT Risk function, including coordination of security audits, penetration testing, third-party assessments, control validation, and remediation tracking. Manage the end-to-end audit lifecycle, including planning, scheduling, execution, findings management, remediation tracking, and reporting. Ensure compliance with regulatory and industry standards, including PCI DSS and ISO 27001, with ownership of audits, control validation, and remediation efforts. Oversee annual reporting, regulatory submissions, partner security attestations, and related cybersecurity and information security documentation. Drive timely and effective remediation of vulnerabilities, audit findings, control gaps, identity risks, cloud security risks, and security issues across the enterprise. Establish and maintain security policies, standards, control frameworks, and governance practices that support business, regulatory, technology, and risk management objectives. Implement and enhance continuous monitoring, detection, response, and reporting capabilities to proactively identify and address security risks. Lead continual optimization of security technologies, tooling, platforms, and resource utilization to improve effectiveness and reduce cost. Drive a bias toward automation and technology-first solutions, reducing manual processes and increasing scalability across Cybersecurity and Information Security functions. Le