Chief Information Security Officer – CISO

Credit Acceptance

. Own the enterprise information security strategy aligned with business goals, regulatory requirements, and AI and modernization plans .

Posted 11/10/2026full-timeUnited StatesLead💰 $300,000 - $400,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading enterprise information security strategies, ensuring compliance with regulatory standards such as GLBA and NYDFS, and managing cyber risk in cloud environments. Proficient in building security into software development processes and leading incident response efforts while fostering a security-aware culture within organizations.

Highest-signal resume keywords

Information Security LeadershipRegulatory Compliance ExperienceCloud Security ArchitectureAI Security ManagementIncident Response and Business Continuity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security StrategyVulnerability ManagementIdentity and Access ManagementData Protection and PrivacySecurity Architecture for Cloud-Native EnvironmentsCI/CD Security IntegrationAI-Assisted Development SecurityThreat DetectionIncident ResponseSecurity Metrics Reporting

Soft Skills

Team BuildingCommunication with ExecutivesInfluencing Cross-Functional TeamsRisk AssessmentSecurity-Aware Culture Promotion

Tools & Technologies

AWSDatabricksNIST CSFISO 27001/27002SOC 2GLBANYDFS Part 500SOXPCI DSSOWASP Top 10

Certifications & Qualifications

CISSPCISM

Industry Keywords

Financial ServicesFintechConsumer LendingCyber Risk ManagementAI-Enabled Systems Security

Tech Stack

Tools & technologies

AWSCloudCyber Security

About the role

Key responsibilities & impact

Own the enterprise information security strategy aligned with business goals, regulatory requirements, and AI and modernization plans
Lead security for migration from on-premises data centers to AWS, ensuring secure standard landing zones and modernization or retirement of legacy technology
Lead vulnerability and exposure operations with AI-assisted prioritization and accountable remediation
Own identity and privileged access for people, services, and agents
Own data protection and privacy, including classification, handling standards, sensitive-data controls, and privacy-by-design reviews
Manage third-party and vendor cyber risk from due diligence through ongoing monitoring
Lead threat detection and incident response, including agent-related playbooks and executive tabletop exercises
Defend against AI-enabled attacks such as deepfake impersonation and synthetic identity fraud
Define security controls for AI agents, including identity, least-privilege access, tool and data governance, runtime testing, audit trails, and suspension controls
Maintain an inventory of AI systems, agents, and AI features, including unsanctioned use
Set acceptable-use, data-handling, and third-party AI standards aligned to NIST AI RMF and ISO/IEC 42001
Build security into software specification, generation, testing, and deployment, including AI-assisted development
Lead compliance with GLBA, NYDFS Part 500, SOX IT general controls, PCI DSS, state privacy laws, and SEC cybersecurity disclosure obligations
Lead audit and examiner response and automate evidence generation
Report security metrics, the annual NYDFS Part 500 CISO report, and annual NYDFS certification to the Board
Lead the Information Security Compliance Committee, meeting at least quarterly with the Executive Leadership Team
Build and develop the security team and promote a security-aware culture
Report to the CTO and maintain direct access to the Audit Committee

Requirements

What you’ll need

Bachelor's degree (computer science or a related field preferred)
10+ years in information security, compliance or a related field
10+ years leading an information security, compliance or risk team
Regulatory compliance experience in financial services, such as GLBA, NYDFS Part 500, SOX and PCI DSS
Experience leading business continuity and cyber incident response, including executive tabletop exercises and response to a significant incident
Strong familiarity with NIST CSF, ISO 27001/27002 and SOC 2
Strong knowledge of security architecture for cloud-native environments: identity and access management, encryption, network and endpoint controls and vulnerability management
Experience building security into CI/CD and software delivery
Practical experience securing AI-enabled systems or AI-assisted development in production, including identity and access, data protection and testing
Experience reporting security and risk to executive leadership and a Board
Required degrees must have been earned at institutions of Higher Education accredited by the Council for Higher Education Accreditation or equivalent
Preferred: Master's degree
Preferred: Financial services, fintech or consumer lending experience
Preferred: AWS and Databricks security at production scale, including securing a migration from on-premises infrastructure
Preferred: Agentic AI in production, including agent identity, governed tool access such as Model Context Protocol, runtime controls and agent-specific incident response
Preferred: AI-assisted detection, triage and response in a security operations center, with human oversight
Preferred: SEC cybersecurity disclosure experience as the security leader of a public company
Preferred: Risk assessment for AI systems and third-party AI vendors
Preferred: CISSP, CISM or an equivalent security certification
Ability to design security architecture enforced through automation
Working knowledge of agent attacks and failures, including prompt injection, tool misuse, identity and privilege abuse, and memory poisoning
Knowledge of OWASP Top 10 for Agentic Applications, NIST AI RMF and ISO/IEC 42001
Ability to weigh security risk against business value
Ability to communicate technical and AI risk to executives and the Board
Ability to build a strong team and influence Engineering, Legal, Compliance, Risk and the business

Benefits

Comp & perks

Equity
Annual cash bonuses
401(K) match
Adoption assistance
Parental leave
Tuition reimbursement
Comprehensive medical, dental, and vision coverage
Nonstandard benefits
Hybrid work model with two work-from-home days per week