SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 170,000 - 190,000 / annual
Stride Funding (operating as Clasp), a Forbes Fintech 50 company at Series B, is seeking a Manager of Information Security to lead their information security program and IT/TechOps team. You will report to the CTO and manage one IT/TechOps team member, taking ownership of the company's security posture across multiple critical domains.
Key responsibilities include: running the SOC 2 compliance program end-to-end using Vanta, managing and evolving information security policies, leading business continuity drills, and representing security in the Risk + Compliance committee. You'll lead the IT/TechOps team on corporate IT and security functions including laptop procurement, MDM, onboarding/offboarding, SaaS vendor management, incident response, and data loss protection.
You will own third-party security reviews and serve as the front line for customer and partner-bank security questionnaires. Technical ownership includes configuring and managing the SIEM with effective alerting, managing vulnerability management and IDS vendors, and advancing cloud security posture on GCP including IAM hardening and platform security.
In partnership with engineering leadership, you'll advance secure SDLC practices in the context of AI agents, ensuring dependency scanning, CI/CD hardening, and threat modeling are robust. You'll also work with the CTO and AI Labs on build-vs-buy analysis for agentic security solutions including detection/triage, evidence collection, and access reviews.
The company values hands-on technical leadership and in-house engineering over vendor sprawl. You'll be expected to script, prototype, and leverage AI tools to solve problems efficiently rather than simply adding headcount or complex solutions.
Required: CISSP certification, 5+ years on a security team, startup experience, compliance program exposure (SOC 2 or ISO 27001), semi-technical degree or hands-on technical background (scripting, web development, automation), comfort with AI tooling, and strong communication skills for customer and regulator-facing interactions.
Nice-to-have: fintech/lending/regulated industry experience, GCP security depth, SOC 2 program ownership from scratch, and experience with partner bank diligence.
