VP Information Security

Be part of a team that's committed to making a difference. We believe in our work and our customers.

Position Location

Remote Type

Office Location (if not fully remote):

Job Description

As the VP of Information Security, you will be the primary architect of our enterprise security vision. This is a high-impact leadership role responsible for designing and executing a multi-year roadmap that seamlessly integrates robust risk management with our core business objectives. You will lead technical operations—from cloud architecture to incident response—while fostering a culture in which security is a shared responsibility across the organization.

Join us in Madison! This hybrid role offers the best of both worlds: the focus of remote work combined with collaborative days at our HQ. Currently out of state? We provide relocation support to help you make the move to Wisconsin seamless.

Key Responsibilities:

• Strategic Leadership: Develop and execute a multi-year security strategy aligned with global business goals and evolving regulatory landscapes.

• Executive Partnership: Act as a key advisor to the Chief Privacy Officer, Chief Compliance Officer, and Legal team to align security controls with GLBA, FTC Safeguards, and state privacy laws.

• Enterprise Risk & Reporting: Mature our security governance and provide executive-level reporting on risk exposure, remediation progress, and overall security posture.

• Security Operations: Oversee threat detection, vulnerability management, and modern ransomware defense. Lead cross-functional incident response and tabletop exercises with executive stakeholders.

• Cloud & Infrastructure: Establish secure architecture across IaaS, PaaS, and SaaS (Azure/AWS), embedding "Security by Design" into system operations and Identity & Access Management (IAM).

• Third-Party Oversight: Lead the design and monitoring of third-party risk management (TPRM) programs, ensuring vendor contracts meet rigorous data protection standards.

Qualifications:

• 12+ years in Information Security, with at least 5 years in a senior leadership role overseeing enterprise-wide accountability for a mid-to-large organization (2,000+ users).

• Advanced mastery of GLBA, FTC Safeguards Rule, and state privacy regulations within the financial services sector.

• Deep hands-on experience building and maturing frameworks based on NIST CSF, ISO 27001, or CIS Controls.

• Demonstrated expertise in cloud security architecture (Azure/AWS preferred), Zero Trust principles, and modern ransomware defense strategies.

• Proven track record of successfully leading organizations through regulatory examinations and external audits.

• Master’s Degree in Cybersecurity (preferred) and CISSP certification (required).

Fairway Home Mortgage, founded in 1996, is a nationwide leader in the mortgage industry. Customer service is at the heart of everything we do. We deliver personalized loan solutions with some of the fastest turn times in the industry. Our mission is to act as trusted advisors, guiding clients through every step of the mortgage process to exceed expectations and ensure satisfaction.

Our culture promotes innovation, growth, and collaboration, offering exciting career paths and professional development. Whether you're starting out or advancing your career, Fairway is a place where your skills and ambitions can thrive.

Current Employees: Head to the Fairway Careers Hub in Workday for internal job openings.

We post some job openings internally for our employees and others externally for the general public. If you cannot find the perfect role right now, do not hesitate to contact the Careers Team at careers@fairwaymc.com. We can answer any questions and keep you updated on future opportunities.

View our E-Verify and Right to Work notices HERE.

Important Notice to Job Seekers! We’ve been made aware of fraudulent messages falsely claiming to be from Fairway recruiters, including links to assessments. These are not legitimate and are not affiliated with Fairway Independent Mortgage Corporation. We’re working with our Information Security team to address this issue. Thank you for your vigilance and continued interest in joining Fairway! All official communication will come from verified Fairway email addresses or our official LinkedIn page. If you receive a suspicious message, please do not click any links and notify us.