Technical Lead - InfoSec & AI Platform
Information Security | AI Governance | Platform Architecture
Department Technology Classification Full-Time
100% Onsite
Charlotte, NC
Core Focus InfoSec and AI Platform Reports To Technical Program Director
Role Scope Technical Lead Status
About the Role
DingoBlu is scaling from pre-launch build-out into a live, regulated neo bank, and its security, AI, and platform foundations need an owner who can run independently. This role formalizes work already underway: the InfoSec program, our emerging AI stack and AI adoption across the company, and the platform/integration architecture connecting DingoBlu to its providers. You’ll report to the Technical Program Director as the technical owner driving the roadmap — not the analyst executing someone else’s checklist. Information security remains the core of the role; AI strategy and platform architecture are extensions of that mandate. Most of DingoBlu’s AI and platform decisions carry security and compliance implications, and this role is where those threads meet. What You’ll Do
Information Security & Compliance
• Own the InfoSec, AWS, and identity/endpoint security policy set — draft, review, and maintain with leadership and the external security partner
• Drive the compliance runway (SOC 2, PCI-DSS, NIST CSF) — gap analysis, audit-ready evidence, and the security/compliance work processes and tracking
• Own vendor and provider security review (third-party risk management) across identity, endpoint, network, and cloud tooling, including new-tool evaluation
• Define and drive identity, endpoint, and incident response operations — SSO, EDR, alert routing, triage and escalation
• Maintain the application/asset inventory and own the launch-readiness security checklist as scope and timeline evolve
• Lead the inventory and management of externally facing product documentation (privacy policy, terms, in-app legal/policy docs) to maintain compliance AI Strategy & Platform Governance
• Own DingoBlu’s tiered AI stack strategy — broad usage, R&D tooling, governance/compliance platforms, cloud governance — and vet new AI tools against cost, security, and regulatory fit
• Design and evolve the AI Dev Pipeline (CI, security scanning, infra provisioning, AI-assisted development), identifying where guardrails are needed
• Draft and maintain the AI usage guideline, driving AI adoption across the teams
• Track AI-relevant regulatory developments in a regulated fintech environment and flag implications early Technical Partnership & Platform Architecture
• Partner with engineering and product on integrations, APIs, and dev-pipeline architecture and methodology, bringing security and AI-governance judgment into design decisions
• Maintain visibility into the provider/vendor roadmap and translate it into a security- and compliance-aware technology roadmap
• Represent security, AI, and platform considerations in cross-functional planning with Ops, Product, and Tech, supporting launch and future releases What We’re Looking For
Experience & Qualifications
• 8+ years in a technical role spanning security, cloud/platform engineering, or software delivery, with hands-on ownership of a security or compliance function
• Demonstrated experience turning ambiguous, fast-moving requirements into documented, adoptable policy and process
• Working fluency in AWS (IAM, logging, security tooling) and modern identity/endpoint stacks (SSO, EDR)
• Exposure to compliance frameworks (SOC 2, PCI-DSS, NIST CSF, ISO 27001), and genuine fluency adopting and governing AI tools and platforms
• Clear written and verbal communication — this role writes policy, presents tradeoffs to leadership, and partners daily with engineering
• Certifications: Security+, AWS certifications, or similar are a plus — DingoBlu supports pursuing relevant certifications on the job The Person We Need
• Operates independently — brings leadership options and recommendations, not just escalations
• Comfortable…