{"id":3545903,"url":"https://alion.io/job/the-clearing-house-director-information-security","title":"Director, Information Security","company":{"id":1837928,"name":"The Clearing House","domain":"theclearinghouse.org","url":"https://alion.io/company/theclearinghouse-org","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":null,"max":185000,"currency":"USD","period":"year","gross":null,"usd_annual":185000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-30T20:44:32Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-02T00:17:28Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Position Summary\nThe Director, Information Security is responsible for providing strategic leadership, governance, and operational oversight for the organization's Information Security programs. This role leads the development and execution of security strategies, policies, standards, and controls designed to protect enterprise systems, applications, data, and critical business operations from evolving cyber threats. The role combines strategic leadership with strong cybersecurity expertise and operational execution.\nThe ideal candidate is a proven cybersecurity leader with experience building high-performing teams, managing complex security programs, influencing executive stakeholders, and operating within highly regulated environments.\nAbout The Clearing House: The Clearing House Payments Company L.L.C. is a bank-owned industry utility that shapes the payments landscape and provides infrastructure for safe, reliable, and efficient payments. We see an economy where everyone is connected and a future where modern payments make life easier. The Clearing House operates four payment systems: a high-value wire-transfer system (the CHIPS® network), the country’s first and largest instant payments system (the RTP® network), an automated clearinghouse network (the EPN® network), and a check image exchange network (the Image Exchange Network). TCH also operates a bank account number tokenization service, runs a payments association known as the TCH Payments Authority, and maintains the rules for private-sector check image exchange through its ECCHO® business line.\nKey Responsibilities\nSecurity Strategy & Leadership\nDevelop, maintain, and execute the enterprise Information Security strategy, roadmap, and operating model.\nAlign security initiatives with business objectives, risk management priorities, and regulatory requirements.\nProvide leadership across all Information Security functions, including security operations, threat management, vulnerability management, identity and access management, cloud security, application security, and security governance.\nAdvise leadership on cybersecurity risks, emerging threats, and recommended mitigation strategies.\nFoster a security-first culture through awareness, education, and collaboration across the enterprise.\nEvaluate emerging technologies and cybersecurity trends to continuously improve organizational security capabilities.\nSecurity Governance, Risk & Compliance\nEstablish and maintain security policies, standards, procedures, and control frameworks.\nEnsure compliance with applicable regulatory, legal, and industry requirements.\nLead security risk assessments and oversee remediation of identified risks and control gaps.\nPartner with Risk Management, Compliance, Legal, and Internal Audit teams to address audit findings and regulatory expectations.\nProvide oversight of security control effectiveness, risk reporting, and governance activities.\nSupport regulatory examinations, independent assessments, and internal audits.\nSecurity Operations & Threat Management\nOversee Security Operations Center (SOC) activities and incident detection, response, and recovery capabilities.\nEnsure effective monitoring of security events, threats, vulnerabilities, and security incidents.\nDirect cyber incident response activities and executive communications during significant security events.\nMaintain threat intelligence, threat hunting, and security monitoring programs.\nEnsure operational security processes effectively reduce risk while maintaining business resiliency.\nReview security metrics, trends, and performance indicators to drive operational improvements.\nVulnerability & Cyber Risk Management\nProvide executive oversight of vulnerability management programs across infrastructure, cloud, applications, and third-party environments.\nEnsure timely identification, prioritization, remediation, and validation of security vulnerabilities.\nEstablish risk-based methodologies for vulnerability prioritization and remediation.\nMonitor cybersecurity risk exposure and ensure business stakeholders understand associated risks.\nReview and approve remediation plans, exceptions, and compensating controls.\nIdentity & Access Management\nEnsure effective governance of user access, privileged access, authentication, and identity lifecycle management processes.\nOversee implementation and operation of IAM, privileged access management (PAM), and identity governance (IGA) capabilities.\nPromote adoption of least privilege, multifactor authentication (MFA), and zero-trust security principles.\nEnsure access controls align with regulatory, audit, and security requirements.\nCloud & Application Security\nProvide strategic oversight for cloud security and secure application development practices.\nEnsure security requirements are integrated into technology architecture, cloud platforms, and software development lifecycles.\nSupport DevSecOps adoption and secure-by-design engineering practices.\nOversee security reviews of cloud services, applications, APIs, and third-party technologies.\nTeam Leadership & Talent Development\nLead, mentor, and develop Information Security managers, engineers, analysts, and specialists.\nEstablish organizational goals, performance expectations, and professional development plans.\nBuild and maintain a high-performing, collaborative security organization.\nManage staffing, succession planning, budget planning, and resource allocation.\nPromote accountability, continuous improvement, and technical excellence across security teams.\nExecutive Communication & Stakeholder Management\nCommunicate cybersecurity risks, program status, and security initiatives to executive leadership and governance committees.\nDevelop executive dashboards, metrics, and reporting that support informed decision-making.\nTranslate technical risks into business impact and actionable recommendations.\nPartner with business leaders to balance security requirements with operational objectives.\nRepresent the Information Security function in strategic planning, governance forums, and cross-functional initiatives.\nRequired Qualifications\nBachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.\n10+ years of progressive experience in cybersecurity, information security, technology risk, or related disciplines.\n5+ years of leadership experience managing cybersecurity teams and security programs.\nStrong understanding of cybersecurity frameworks, risk management methodologies, and security operations.\nExperience leading enterprise security initiatives involving cloud technologies, identity management, vulnerability management, and security operations.\nDemonstrated experience developing and executing cybersecurity strategies and roadmaps.\nExperience presenting cybersecurity risks and recommendations to executive leadership and governance committees.\nStrong knowledge of security technologies, controls, and industry best practices.\nExcellent leadership, communication, stakeholder management, and decision-making skills.\nMust be legally authorized to work in the United States.\nPhysical Demands and Work Environment: The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available. Travel may be required. Candidates will report to the office three days each week. Onsite work requirements may change at any time. \nThe anticipated annual salary range for NY-based candidates for this position is up to $185,000. Base salary and position level will be determined by the role, experience, skill set and location. For eligible positions, discretionary incentive compensation may be awarded contingent on personal and company performance. Our benefits program includes medical, dental, vision, life insurance, 401k plan with company contribution and company match, tuition reimbursement and more.","description_format":"text","description_chars":8079,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-30T20:44:32Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":42,"reasons":["conf:5","velocity","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":185000,"is_top_pay":false},"html_url":"https://alion.io/job/the-clearing-house-director-information-security","json_url":"https://alion.io/job/the-clearing-house-director-information-security.json","meta":{"generated_at":"2026-11-02T08:26:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11924,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1837928},"rest":"https://alion.io/mcp/rest/get_company?id=1837928"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthe-clearing-house-director-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthe-clearing-house-director-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthe-clearing-house-director-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/the-clearing-house-director-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthe-clearing-house-director-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3545903}},{"tool":"search_jobs","arguments":{"company":"theclearinghouse.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3545903},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}