Director of Security, Risk

SentiLink

. Lead and develop SentiLink's security governance, risk, and compliance organization .

Posted 11/6/2026full-timeRemote • United StatesLead💰 $200,000 - $260,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading security governance, risk management, and compliance programs, with a strong focus on frameworks such as FedRAMP, SOC 2, and PCI DSS. Proven ability to build and enhance security programs while effectively managing teams and communicating with stakeholders.

Highest-signal resume keywords

Security GovernanceRisk ManagementCompliance ProgramsFedRAMPSOC 2

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecuritySecurity ComplianceRisk AssessmentControl FrameworksVulnerability ManagementSecurity ArchitectureIdentity And Access ManagementCloud InfrastructureAudit ManagementControl Effectiveness

Soft Skills

Written CommunicationVerbal CommunicationJudgmentInfluencing SkillsMentoring

Tools & Technologies

VantaCompliance AutomationSecurity Programs

Industry Keywords

PCI DSSRegulatory FrameworksThird-Party Risk ManagementContinuous MonitoringChange-Management Compliance

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Lead and develop SentiLink's security governance, risk, and compliance organization
Manage and mentor security and compliance professionals and develop organizational and hiring plans
Own security compliance and audit programs, including FedRAMP, SOC 2, and PCI DSS
Lead external assessments, manage control effectiveness and evidence collection, oversee Vanta and compliance automation
Oversee FedRAMP continuous monitoring, POA&M governance, change-management compliance, agency-specific requirements, and assessment readiness
Establish and operate a rigorous security risk management program
Own identification, assessment, documentation, escalation, and treatment of security risks, control deficiencies, and exceptions
Lead third-party security risk management, vendor diligence, assessment quality, and ongoing vendor oversight
Lead customer and partner security assessments and audits
Evaluate contractual security requirements with Legal and coordinate technical responses
Own security policy and control governance and maintain policies, standards, and control frameworks
Develop accountability, measurable outcomes, repeatable processes, and automation
Identify emerging risks and requirements, communicate recommendations to leadership, and drive improvements across organizational boundaries
Report to SentiLink's security leader and collaborate with Security Engineering, Engineering, IT, Legal, Product, and business teams
Build a proactive, effective, and scalable security program that meaningfully reduces organizational risk

Requirements

What you’ll need

10+ years of experience in information security, including significant experience leading security governance, compliance, assurance, or risk management programs
Demonstrated experience owning major security compliance and assurance programs such as FedRAMP, SOC 2, PCI DSS, or comparable regulatory frameworks
Direct engagement with auditors, assessors, and external stakeholders
Strong technical understanding of modern cloud infrastructure, SaaS application security, identity and access management, vulnerability management, and security architecture
Ability to independently evaluate technical findings, control designs, and remediation approaches
Proven ability to build and improve security programs, identify control gaps and emerging requirements, establish priorities, and translate security risks into actionable organizational plans
Experience managing and developing security professionals and leading programs across distributed teams
Experience with third-party risk assessments, customer security diligence, and security risk management
Ability to evaluate complex technical and contractual security requirements
Strong written and verbal communication skills, sound judgment, and ability to influence engineering teams, business leaders, auditors, and external stakeholders
This is a remote, US-based position
Must be legally authorized to work in the United States

Benefits

Comp & perks

Employer paid group health insurance for you and your dependents
401(k) plan with employer match
Flexible paid time off
Regular company-wide in-person events
Home office stipend
Equity