VP Information Security

Be part of a team thats committed to making a difference. We believe in our work and our customers.

Position Location

Remote Type

Office Location (if not fully remote):

Job Description

As the VP of Information Security you will be the primary architect of our enterprise security vision. This is a high-impact leadership role responsible for designing and executing a multi-year roadmap that seamlessly integrates robust risk management with our core business objectives. You will lead technical operationsfrom cloud architecture to incident responsewhile fostering a culture in which security is a shared responsibility across the organization.

Key Responsibilities:

• Strategic Leadership: Develop and execute a multi-year security strategy aligned with global business goals and evolving regulatory landscapes.

• Executive Partnership: Act as a key advisor to the Chief Privacy Officer Chief Compliance Officer and Legal team to align security controls with GLBA FTC Safeguards and state privacy laws.

• Enterprise Risk & Reporting: Mature our security governance and provide executive-level reporting on risk exposure remediation progress and overall security posture.

• Security Operations: Oversee threat detection vulnerability management and modern ransomware defense. Lead cross-functional incident response and tabletop exercises with executive stakeholders.

• Cloud & Infrastructure: Establish secure architecture across IaaS PaaS and SaaS (Azure/AWS) embedding Security by Design into system operations and Identity & Access Management (IAM).

• Third-Party Oversight: Lead the design and monitoring of third-party risk management (TPRM) programs ensuring vendor contracts meet rigorous data protection standards.

Qualifications:

• 12 years in Information Security with at least 5 years in a senior leadership role overseeing enterprise-wide accountability for a mid-to-large organization (2000 users).

• Advanced mastery of GLBA FTC Safeguards Rule and state privacy regulations within the financial services sector.

• Deep hands-on experience building and maturing frameworks based on NIST CSF ISO 27001 or CIS Controls.

• Demonstrated expertise in cloud security architecture (Azure/AWS preferred) Zero Trust principles and modern ransomware defense strategies.

• Proven track record of successfully leading organizations through regulatory examinations and external audits.

• Masters Degree in Cybersecurity (preferred) and CISSP certification (required).

This position is based out of our Madison WI headquarters. To be considered candidates must:

• Currently reside within a local commuting distance of Madison WI.

Fairway Home Mortgage founded in 1996 is a nationwide leader in the mortgage industry. Customer service is at the heart of everything we do. We deliver personalized loan solutions with some of the fastest turn times in the industry. Our mission is to act as trusted advisors guiding clients through every step of the mortgage process to exceed expectations and ensure satisfaction.

Our culture promotes innovation growth and collaboration offering exciting career paths and professional development. Whether youre starting out or advancing your career Fairway is a place where your skills and ambitions can thrive.

Current Employees: Head to the Fairway Careers Hub in Workday for internal job openings.

We post some job openings internally for our employees and others externally for the general public. If you cannot find the perfect role right now do not hesitate to contact the Careers Team at . We can answer any questions and keep you updated on future opportunities.

View our E-Verify and Right to Work notices HERE.

Important Notice to Job Seekers! Weve been made aware of fraudulent messages falsely claiming to be from Fairway recruiters including links to assessments. These are not legitimate and are not affiliated with Fairway Independent Mortgage Corporation. Were working with our Information Security team to address this issue. Thank you for your vigilance and continued interest in joining Fairway! All official communication will come from verified Fairway email addresses or our official LinkedIn page. If you receive a suspicious message please do not click any links and notify us.