Head of Business Information Security

2 weeks ago


New York, New York, United States Pagaya Technologies Ltd. Full time

Head of Business Information Security

at Pagaya Technologies Ltd.

About Pagaya Technologies Ltd.

Transforming the Financial Landscape

Pagaya Technologies Ltd. is a pioneering financial technology firm dedicated to revolutionizing the lending ecosystem for investors through advanced machine learning, extensive data analytics, and sophisticated AI-driven risk evaluation. Our primary focus lies in consumer credit and tangible assets, utilizing a proprietary suite of solutions and pipelines designed to uncover enhanced value for institutional investors. Our models not only augment this pipeline but also enhance liquidity, thereby broadening access to credit opportunities.

We operate with agility and intelligence, pinpointing opportunities and crafting comprehensive solutions that integrate AI models, unique data sources, and innovative business partnerships. Every member of the Pagaya team tackles new challenges daily within a culture rooted in collaboration and community, ensuring that everyone contributes meaningfully, regardless of their role.

Our Team

Founded in 2016 by experienced professionals in finance and technology, our team has grown to over 400 members across various locations. You will collaborate with some of the most talented, supportive, and intelligent leaders and colleagues in the industry.

Our Core Values

Continuous Learning: Embrace the journey of growth and improvement.

Collective Success: Our mission is to ensure that all participants in our ecosystem thrive, which ultimately drives Pagaya's success.

Open Dialogue and Commitment: Encourage respectful questioning and, once decisions are made, fully commit to them.

The Pagaya Approach: Apply first principles thinking tailored to our unique needs.

About the Role

The Head of Business Information Security will spearhead the efforts of Pagaya Investments US LLC in effectively implementing and managing all pertinent information security controls and solutions. This role will involve close collaboration with our Israeli CISO office and its security architecture team to assess and deploy cybersecurity solutions across various domains, including Cloud, Identity and Access Management (IAM), Data Loss Prevention (DLP), mobile and endpoint security, security monitoring, and training, to safeguard Pagaya's essential assets, data, and intellectual property.

The ideal candidate will possess a distinctive skill set that enables them to build and collaborate with our diverse network of partners and the Global Information Security team, making a direct impact on Pagaya's rapidly expanding business. This position offers the opportunity to engage with cutting-edge security technologies while continuously enhancing both technical and managerial skills to support Pagaya's growth initiatives.

Key Responsibilities

- Oversee the security solutions technology stack for the US throughout the project lifecycle, ensuring alignment with localized business, regulatory, and technical requirements.

- Collaborate with Pagaya's Global Security Engineering team to ensure consistent implementation of security controls across the organization.

- Drive the secure deployment of a global security solution stack focused on cloud services, mobile, and endpoint security.

- Assist the Global CISO in developing and maintaining up-to-date information security procedures, standards, and guidelines.

- Manage a comprehensive defense-in-depth strategy addressing cross-department security needs.

- Communicate security solutions and enterprise security posture effectively to executives, business sponsors, and partners.

- Develop and manage information security awareness training programs for all US employees and contractors.

- Facilitate IT risk assessments and collaborate with stakeholders to determine acceptable levels of residual risk.

- Support internal security audits and compliance efforts, including gathering evidence and addressing findings.

- Oversee security incidents and events to protect corporate IT assets and reputation.

- Monitor metrics to assess the effectiveness of the security program and allocate resources appropriately.

- Manage relationships with outsourced vendors providing information security functions.

- Coordinate operational components of incident management, including detection and response.

- Identify information asset owners to classify data and systems for control framework implementation.

- Ensure compliance with policies and audit requirements through regular reviews of audit trails and monitoring data.

- Develop disaster recovery policies and procedures aligned with business continuity management goals.

Qualifications

- 7+ years of proven experience in information security management, including hands-on experience with key technologies such as endpoint security, email security, DLP, and SIEM.

- Comprehensive knowledge of layered security controls and their deployment and management.

- Experience with cloud solutions (IaaS, PaaS, SaaS) and security domains such as IAM and endpoint protection.

- 6+ years of experience in defining security requirements and deploying solutions.

- Strong understanding of information security concepts, design, and methodologies.

- Relevant security certifications (CCSP, CISSP, CISM, CISA, etc.) are advantageous.

- Experience with security and compliance audits in regulated industries.

- A continuous learner with a flexible mindset, capable of innovative thinking in a dynamic environment.

- A self-starter with a consultative approach and meticulous attention to detail.

- Exceptional communication, presentation, and stakeholder management skills.



  • New York, New York, United States Sumitomo Mitsui Financial Group, Inc. Full time

    Sumitomo Mitsui Financial Group, Inc. (SMFG) stands as a premier global financial institution, with its roots tracing back over 400 years. Headquartered in Tokyo, SMFG provides a comprehensive suite of financial services, encompassing banking, leasing, securities, credit cards, and consumer finance. With a workforce exceeding 80,000 across more than 130...


  • New York, New York, United States JPC Partners Full time

    JPC Partners is seeking a Head of Enterprise Security who will collaborate closely with executive leadership, security professionals, and other essential stakeholders. This role is pivotal in crafting and executing a robust information security strategy and program aimed at enhancing the organization's security posture. The successful candidate will...


  • New York, New York, United States JPC Partners Full time

    JPC Partners is seeking a Head of Enterprise Security to collaborate closely with executive leadership, security experts, and essential stakeholders. This pivotal role is responsible for crafting and executing a comprehensive information security strategy and program aimed at enhancing the organization's security posture. The individual will spearhead the...


  • New York, New York, United States JPC Partners Full time

    JPC Partners is seeking a Head of Enterprise Security Operations to collaborate closely with executive management, security experts, and essential stakeholders. This role is pivotal in formulating and executing a holistic information security strategy and program aimed at enhancing the organization’s security posture. The successful candidate will...


  • New York, New York, United States City of New York Full time

    Company OverviewPosition Overview The City of New York's Department of Transportation (DOT) is in search of a skilled Information Security Solutions Architect, who is passionate about cybersecurity and possesses extensive knowledge across various domains of information security. In collaboration with the Executive Director of Information Security and various...


  • New York, New York, United States ISMG - Information Security Media Group Full time

    About the RoleWe are seeking a highly motivated and experienced Business Development Manager to join our Sales Division at ISMG - Information Security Media Group. As a key member of our team, you will be responsible for driving business growth and revenue expansion by identifying and pursuing new sales opportunities within the cybersecurity industry.Key...


  • New York, New York, United States PJT Partners Full time

    PJT Partners is a premier advisory-focused investment banking firm. Our team of seasoned professionals provides a comprehensive range of strategic advisory services, including shareholder advisory, restructuring, special situations, and private fund advisory and placement services to corporations, financial sponsors, institutional investors, and governments...


  • New York, New York, United States Rockstar Games Full time

    At Rockstar Games, we are dedicated to crafting exceptional entertainment experiences. We are in search of a seasoned and strategic leader in Information Security Governance, Risk, and Compliance (GRC) who will take charge of assembling and guiding a team of security professionals to implement essential, strategic initiatives that effectively minimize risk...


  • New York, New York, United States Rockstar Full time

    About Rockstar GamesAt Rockstar Games, we are dedicated to crafting exceptional entertainment experiences.A career with us means joining a team that works on some of the most creatively fulfilling and ambitious projects in the entertainment industry. You will be embraced by a supportive and inclusive environment where you can grow and collaborate with some...


  • New York, New York, United States Sumitomo Mitsui Banking Corporation Full time

    Job SummarySumitomo Mitsui Banking Corporation (SMBC) is a leading global financial institution with a rich history and diverse range of financial services. We are seeking an experienced Head of Securities Operations to join our team in New York City.Key ResponsibilitiesOversight of approximately 30 staff responsible for middle office, settlement, and...


  • New York, New York, United States Global Relay Full time

    For over 20 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions.Reporting to the Chief Information Security Officer (CISO), you will play a key role in ensuring the successful implementation and completion of security initiatives alongside Global...


  • New York, New York, United States DBI Staffing Full time

    We are seeking a highly skilled Information Security Administrator to join our team at DBI Staffing. As a key member of our IT department, you will play a critical role in protecting our computer networks from cyber threats and ensuring the smooth operation of our systems.Key Responsibilities:Collaborate with our IT team to develop, implement, and track the...


  • New York, New York, United States ISMG - Information Security Media Group Full time

    Job OverviewAbout ISMGISMG is a leading global intelligence and education organization, specializing in cybersecurity, information technology, artificial intelligence, and operational technology. With a robust portfolio that encompasses over 20 brands and 38 digital media platforms, we engage with a vast audience of more than 1.8 million subscribers through...


  • New York, New York, United States Michael Page Full time

    Client will move quickly qualified candidatesCompetitive compensation and benefits About Our Client A new financial software company located in Manhattan. Job DescriptionOversee the firm's information security posture, providing regular updates to senior management.Conduct assessments to identify information security risks and recommend remediation...


  • New York, New York, United States Dreamforce Services, Inc Full time

    About the Role: Information Security ArchitectJob Overview:As an Information Security Architect, you will play a pivotal role in enhancing the security posture of our organization. Your expertise will guide the design and implementation of robust security frameworks that protect our critical information assets.Key Responsibilities:Evaluate and enhance the...


  • New York, New York, United States Noor Staffing Group Full time

    Salary: $125,000-$145,000Work Arrangement: On-Site Monday-Thursday / Remote FridaysPlease note that candidates must reside in the local area as relocation is not an option for this position.The Cybersecurity Specialist plays a crucial role in safeguarding, managing, and overseeing the security of the organization's enterprise infrastructure and network...


  • New York, New York, United States Turner & Townsend Full time

    Job DescriptionCompany OverviewTurner & Townsend is a leading global professional services company that delivers transformational programs across the real estate, infrastructure, and natural resources sectors. With a presence in 50 countries and 118 offices worldwide, we provide expert advice and guidance to clients across the globe.Job SummaryWe are seeking...


  • New York, New York, United States Stellar Services Full time

    Role Overview:As an Information Security Specialist at Stellar Services, you will engage with both technology and business units to ensure the seamless integration of innovative technologies and security measures. Your efforts will ensure alignment with security frameworks, industry standards, and organizational strategies.Key Responsibilities:1. **System...


  • New York, New York, United States Heidrick & Struggles Full time

    About Us:Heidrick & Struggles (Nasdaq: HSII) stands as a leading provider of global leadership advisory and on-demand talent solutions, addressing the senior-level talent and consulting requirements of the world's foremost organizations. As trusted advisors in leadership, we collaborate with our clients to cultivate future-ready leaders and organizations,...


  • New York, New York, United States Heidrick & Struggles Full time

    About Us:Heidrick & Struggles (Nasdaq: HSII) stands as a leading provider of global leadership advisory and on-demand talent solutions, catering to the senior-level talent and consulting requirements of the world's foremost organizations. As trusted advisors in leadership, we collaborate with our clients to cultivate future-ready leaders and organizations,...