--- title: 'Director of Security & Risk at SentiLink' canonical: 'https://feeny.ai/job/director-of-security-risk-sentilink-united-states-ndk3k9jq2fww' type: 'job' last_seen: '2026-11-06' --- # Director of Security & Risk at SentiLink - **Company:** SentiLink - **Location:** United States - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-11-06 - **Last confirmed live:** 2026-11-06 - **Apply:** https://jobs.ashbyhq.com/sentilink/2106637d-2635-48b1-9c10-427b2d22eed7 ## Job description [SentiLink](https://www.sentilink.com/) helps institutions and protects customers by accurately resolving identities and flagging fraud risk. Each day, we verify more than 3 million identities, flagging 150k+ fraud attempts in the process. The problems we work on are challenging, and solving them takes deep domain expertise, rigorous analysis, and a willingness to dig into the details. At SentiLink, you'll work alongside smart, highly collaborative colleagues who respect each other's time and judgment, take ownership, and follow through on their commitments. Together, we do truly meaningful work protecting the identities of innocent consumers and flagging the fraudsters attempting to exploit them. We're well capitalized and growing quickly. We already serve 13 of the top 15 U.S. banks, we're expanding into new markets, and we're backed by Craft Ventures, Andreessen Horowitz, NYCA, and Max Levchin. We've been named to the[Forbes Fintech 50](https://www.forbes.com/companies/sentilink/?list=fintech50) and as a[2026 FICO Industry Vanguard Decision Award Winner](https://www.businesswire.com/news/home/20260330439998/en/SentiLink-Named-a-2026-FICO-Industry-Vanguard-Decision-Award-Winner-for-Leadership-in-Identity-Theft-Detection). We were also the[first company to go live](https://resources.sentilink.com/blog/sentilink-makes-history-as-first-ecbsv-provider) with the electronic Consent Based Social Security Number Verification (eCBSV) service, and we've [testified before the U.S. Congress](https://resources.sentilink.com/media/dr.-david-maimons-congressional-testimony-on-emerging-fraud-threats-and-the-evolving-fraud-landscape) on the future of identity. We want SentiLink to be the best place you've ever worked. We offer generous benefits and support a range of working arrangements, from fully remote to in-office. We are a digital-first company with strong collaboration across the U.S. and India, and we meet in person regularly to build relationships. We have offices in Austin, San Francisco, New York City, Seattle (Bellevue), Los Angeles, and Chicago in the U.S., and in Gurugram (Delhi) and Bengaluru in India. Role: SentiLink's Information Security team is responsible for protecting our systems, data, and customers while enabling the business to operate securely and efficiently. We work closely with Engineering, IT, Legal, Product, and business teams to manage security risks, maintain regulatory compliance, and build effective security controls across the organization. We're looking for a Director of Security & Risk to lead our security governance, compliance, assurance, and risk management programs. This is a leadership role with broad ownership across FedRAMP, SOC 2, PCI DSS, customer and partner security assessments, third-party risk, and security policy. This is not a traditional GRC role. SentiLink operates a highly technical, AWS-based environment, and many of the risks and compliance requirements we manage require deep technical understanding. We're looking for someone who can independently evaluate technical risks, understand security architecture and proposed remediations, and work effectively with engineers, auditors, regulators, and business stakeholders. You will lead and develop a team of security and compliance professionals, establish priorities, identify gaps in our existing programs, and develop a roadmap for improving our security posture. We expect you to bring the experience and judgment to identify problems and opportunities independently, rather than simply execute an existing plan. You will report to SentiLink's security leader and work closely with Security Engineering, which remains a separate function responsible for technical security architecture and implementation. Success in this role means building a proactive, effective, and scalable security program that goes beyond passing audits to meaningfully reducing organizational risk. This is a remote, US-based position. Responsibilities: - Lead and develop SentiLink's security governance, risk, and compliance organization. Manage and mentor security and compliance professionals, evaluate program effectiveness, identify gaps in expertise and capacity, and develop organizational and hiring plans as the company grows. - Own SentiLink's security compliance and audit programs, including FedRAMP, SOC 2, and PCI DSS. Lead external assessments, manage control effectiveness and evidence collection, oversee Vanta and compliance automation, and ensure the organization continuously meets its obligations rather than preparing only for periodic audits. - Drive the ongoing maturity of SentiLink's government security program. Oversee FedRAMP continuous monitoring, POA&M governance, change-management compliance, agency-specific requirements, and assessment readiness. Anticipate evolving requirements, including FedRAMP 20x, and develop plans to address them. - Establish and operate a rigorous security risk management program. Own the identification, assessment, documentation, escalation, and treatment of security risks, control deficiencies, and exceptions. Ensure material risks receive appropriate attention and that remediation is tracked through completion. - Lead SentiLink's third-party security risk management program. Establish and enforce risk-based vendor diligence requirements, improve assessment quality, manage ongoing vendor oversight, and ensure material security concerns are resolved or appropriately escalated before approval. - Own customer and partner security assurance. Lead complex security assessments and audits from financial institutions, government agencies, and other partners. Evaluate contractual security requirements in collaboration with Legal, coordinate technical responses, and ensure security representations are accurate, complete, and defensible. - Own security policy and control governance. Maintain security policies, standards, and control frameworks, ensuring requirements are appropriately mapped across regulatory obligations, reflected in actual operations, and periodically evaluated for effectiveness. - Continuously improve the effectiveness and scalability of security programs. Develop clear accountability, measurable outcomes, repeatable processes, and automation. Proactively identify emerging risks and requirements, communicate recommendations to leadership, and drive improvements across organizational boundaries. Requirements: - 10+ years of experience in information security, including significant experience leading security governance, compliance, assurance, or risk management programs. - Demonstrated experience owning major security compliance and assurance programs such as FedRAMP, SOC 2, PCI DSS, or comparable regulatory frameworks, including direct engagement with auditors, assessors, and external stakeholders. - Strong technical understanding of modern cloud infrastructure, SaaS application security, identity and access management, vulnerability management, and security architecture. Ability to independently evaluate technical findings, control designs, and remediation approaches. - Proven ability to build and improve security programs, independently identify control gaps and emerging requirements, establish priorities, and translate security risks into actionable organizational plans. - Experience managing and developing security professionals, establishing high standards for quality and accountability, and leading programs across distributed teams. - Experience with third-party risk assessments, customer security diligence, and security risk management, including the ability to evaluate complex technical and contractual security requirements. - Strong written and verbal communication skills, sound judgment, and the ability to influence engineering teams, business leaders, auditors, and external stakeholders without relying solely on formal authority. Compensation: $200,000/year - $260,000/year + equity + benefits Note: This salary range may be inclusive of several career levels, and the actual base salary within that range will be determined by several components including but not limited to the individual's experience, skills, and qualifications. Perks: - Employer paid group health insurance for you and your dependents - 401(k) plan with employer match (or equivalent for non US-based roles) - Flexible paid time off - Regular company-wide in-person events - Home office stipend, and more! Corporate Values: - Follow Through - Deep Understanding - Whatever It Takes - Do Something Smart ## About SentiLink ## Company Overview - **One-liner**: SentiLink provides identity fraud prevention solutions that help financial institutions stop synthetic fraud, identity theft, and first-party fraud at the point of application. - **Entity Type**: Private (Series B) - **Headquarters**: San Francisco, California, United States - **Founded**: 2017 - **Founders**: Naftali Harris and Max Blumenfeld ## Core Business - Primary industry: Fraud Detection, Identity Verification, Financial Technology / Cybersecurity - Target customers: B2B – enterprise banks, credit unions, and fintech unicorns - Mission: Empower institutions and individuals to transact confidently with one another by preventing fraud at account opening and beyond. ## Products & Services All products are delivered via API, with flexible integration and optional human-in-the-loop case review. - **[Synthetic Fraud Score](https://www.sentilink.com/)**: Model that identifies and blocks first- and third-party synthetic fraud with high precision. - **[ID Theft Score](https://www.sentilink.com/)**: Detects fraudulent applicants to reduce losses from traditional identity theft. - **[Facets](https://www.sentilink.com/)**: Attributes that enhance fraud detection models with a clearer view of identity and risk. - **[Insights](https://www.sentilink.com/)**: Comprehensive risk assessment on incoming applications, combining multiple signals. - **[eCBSV](https://www.sentilink.com/)**: Real-time verification with the Social Security Administration’s database. - **[ID Complete](https://www.sentilink.com/)**: Fills in missing applicant data (e.g., SSNs, DOB) to clarify identity and boost approval rates. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed (private company) - **Key Metric**: Total funding ~$84M–$85M ([Crunchbase](https://www.crunchbase.com/organization/sentilink) reports $84M; [LinkedIn](https://www.linkedin.com/company/sentilink) reports $85M). Annual revenue estimated at $30M ([Crunchbase](https://www.crunchbase.com/organization/sentilink)). - **Notable Investors**: Andreessen Horowitz (led Series A), Craft Ventures (led Series B), NYCA Partners. - **Growth Signals**: - Headcount of 162 (+28.7% YoY) with 200+ active job postings ([LinkedIn](https://www.linkedin.com/company/sentilink)). - Trusted by 6/10 top U.S. banks and 13/15 top credit unions ([sentilink.com](https://www.sentilink.com/)). - Acquired Upstream Logix in 2022. - Expanding beyond lending into deposit accounts and buy-now-pay-later use cases. ## Competitive Advantages - Deep domain expertise: product team includes dedicated risk analysts who review cases and combine human judgment with proprietary ML models. - Direct SSA verification (eCBSV) gives unique access to authoritative identity data. - High-touch, flexible integrations and strong partner ecosystem. - Focused exclusively on fraud at the point of application, with tailored scores for different fraud types (synthetic, ID theft, first-party). ## Strategic Focus - Continue building the “R&D engine” to stay ahead of evolving fraud patterns. - Scale product suite to cover more account types (deposit accounts, BNPL) and deepen relationships with financial institutions. - Grow headcount aggressively, especially in engineering, data science, and go-to-market roles. - Maintain a culture that balances remote flexibility with in-person meetups to foster collaboration. ## Why Work Here - **Culture**: High-performance, ownership-driven, with values like “Deep Understanding,” “Do Something Smart,” “Follow Through,” and “Whatever It Takes” ([sentilink.com/careers](https://www.sentilink.com/careers/)). - **Remote/Hybrid**: Remote-first with regular in-person meetups. - **Perks**: 100% employer-paid medical, dental, and vision; 401(k) match; flexible time off; home office stipend; generous parental leave (14 weeks birthing, 10 weeks non-birthing). - **Growth**: Fast-growing company (nearly 30% YoY headcount growth) with many open roles across engineering, data science, and strategy. - **Impact**: Work that directly protects consumers and the financial system from billions in fraud losses. ## Sources 1. [sentilink.com](https://www.sentilink.com/) – Company homepage, product descriptions, and customer logos 2. [sentilink.com/careers](https://www.sentilink.com/careers/) – Culture, values, and perks 3. [linkedin.com/company/sentilink](https://www.linkedin.com/company/sentilink) – Headcount, funding, executive team, job postings 4. [crunchbase.com/organization/sentilink](https://www.crunchbase.com/organization/sentilink) – Funding rounds, revenue estimate, product list 5. [jobs.ashbyhq.com/sentilink](https://jobs.ashbyhq.com/sentilink) – Active job openings ## Other roles at SentiLink - [Senior Software Engineer, Frontend](https://feeny.ai/job/senior-software-engineer-frontend-sentilink-united-states-mx2myr4zrv1e) — United States - [Senior Product Engineer, Full Stack](https://feeny.ai/job/senior-product-engineer-full-stack-sentilink-united-states-3g2vck9r0d0g) — United States - [Senior Software Engineer, Full Stack](https://feeny.ai/job/senior-software-engineer-full-stack-sentilink-united-states-3bv7wmpsz50m) — United States - [Federal Account Executive](https://feeny.ai/job/federal-account-executive-sentilink-united-states-5257k6p8z90a) — United States - [Strategic Account Executive, Big Tech](https://feeny.ai/job/strategic-account-executive-big-tech-sentilink-united-states-45p9pm1bvxqf) — United States - [Senior Software Engineer, Data Platform](https://feeny.ai/job/senior-software-engineer-data-platform-sentilink-united-states-6gvr7ebgwghw) — United States - [Talent Acquisition Associate (Entry Level / New Grad)](https://feeny.ai/job/talent-acquisition-associate-entry-level-new-grad-sentilink-austin-zv8hgf9pdf5r) — Austin, TX - [Lead Recruiter, GTM & Business](https://feeny.ai/job/lead-recruiter-gtm-business-sentilink-united-states-19kejbrzytj8) — United States - [Staff/Principal Recruiter, Leadership & Strategic Hiring](https://feeny.ai/job/staff-principal-recruiter-leadership-strategic-hiring-sentilink-united-states-hm1gz3r1nzw5) — United States - [Demand Generation Associate/Specialist](https://feeny.ai/job/demand-generation-associate-specialist-sentilink-united-states-6hv69xk2gn1f) — United States