- Experience: 3–6+ years across information security, security engineering, cloud security, or technical GRC roles, ideally with at least some time in a high-growth fintech, financial services, or regulated SaaS environment.
- Hands-on technical depth: Comfortable configuring and operating modern security tooling such asEDR, MDM, SSO/IAM, DLP, and cloud security tooling. Knowledge of Jamf, SentinelOne, Okta are a plus
- Cloud security: Working knowledge of AWS security, IAM, networking, KMS, logging, and common misconfiguration risks. You can reason about real architecture and point out where the risks are.
- Foundational concepts: Solid grasp of networking, identity, cryptography, secure SDLC, and web application security. You don’t need to be an offensive security specialist, but you should know how attackers think.
- GRC / audit fluency: Direct experience with SOC 2 Type II and ISO 27001 are a plus.
- Communication: You can explain a technical risk to engineering team members, write a clean policy, and disagree productively with an Engineering lead in the same week.
- All-rounder mindset: You are equally willing to dig into a misconfigured IAM policy and fill out a 200-question bank questionnaire. You don’t silo the work into “technical” and “non-technical.”
Nova Credit uses AI tools to help our recruiters and interviewers take notes during interviews. All hiring decisions are made by people, never by AI alone. To request removal of such a transcription tool, an accommodation, or to learn more, contact recruiting@novacredit.com.
$118,400 - 140,600 USD per year
The above compensation range is for United States-based candidates and is dependent on individual experience, skills, education, location, and qualifications. We consider all elements of compensation to be a part of the value we provide to Novans. This may include base salary, equity grants, incentive compensation for eligible roles, professional development, flexible PTO, and tenure rewards. In the U.S., our benefits package includes comprehensive and generously subsidized medical, dental, and vision insurance options, along with a company-sponsored 401k plan, parental leave of absence, sick time off, and paid time off vacation.
Before submitting your application, please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information during the application process.