Senior Engineering Manager, Security & IT

The Role in Context

Fingerprint's security, IT, and compliance function is more mature than most companies of this size: SOC 2 Type 2 + HIPAA achieved, a comprehensive policy suite in place, and solid IT operations running globally. What the function now needs is strategic leadership: someone who can unify security posture, IT operations, and compliance under a coherent strategy, mature each discipline to the next level, and be the credible voice of security and compliance to the rest of the engineering org and to enterprise customers.

We're looking for a Senior Manager, Security & IT to own this function end-to-end, reporting directly to the VP of Engineering. You will manage 4 people across three disciplines: application security, IT operations, and compliance.

This is a VP-direct role with high autonomy and high visibility. Enterprise customers — many of whom are financial institutions and large-scale fraud prevention operators — regularly ask about Fingerprint's security posture. You'll be the person who owns that answer.

Your Mission

• Unify and mature the function — Security, IT, and compliance have operated as separate workstreams. You create a coherent strategy across all three, with shared standards, shared risk language, and a roadmap that scales with the business
• Own the security posture — Application security, zero-trust principles, vulnerability management, and security-by-default practices across the engineering org — you set the standard, you hold it, and you work across teams to embed it
• Scale the compliance program — The next horizon is expanding scope, maturing evidence collection, and positioning Fingerprint for compliance requirements as enterprise deals grow
• Run reliable IT operations — 100% remote, globally distributed engineering org. IT operations is a critical function that serves every Fingerprint employee. You own the tooling, the processes, and the reliability of those systems
• Be the security voice to customers and leadership — Enterprise customers, prospects, and partners regularly evaluate Fingerprint's security posture. You represent it credibly, own the security questionnaire process, and communicate risk and posture to the VP and leadership team

What You'll Do

Security Strategy & Application Security

• Define and own Fingerprint's application security roadmap: vulnerability management, penetration testing program, security review process for new features and architectural changes
• Build security-by-default practices into engineering workflows — not as a gate, but as a capability every engineering team has
• Own the vendor security assessment process — Fingerprint handles sensitive customer data for major enterprise customers; you ensure third parties meet the bar
• Define zero-trust security principles and ensure they're embedded in the Cloud Platform and engineering org

Compliance & GRC

• Own the SOC 2 Type 2 annual audit cycle — evidence collection, auditor man