About This Role
Leading the security strategy for a global financial technology platform is the core of this strategic leadership role, supporting cross-border payments and digital financial services. You will oversee the security of applications, cloud infrastructure, identity systems, payment operations, and third-party integrations while protecting sensitive data and financial assets. This opportunity is to build and scale a security function, influence executive-level decisions, and establish security as a strategic business enabler in a fast-growing, fully remote environment.
Responsibilities
- Define and own a risk-based security strategy and roadmap, prioritizing initiatives according to threat exposure, business impact, and operational risk
- Communicate security posture, priorities, and investment needs to executive leadership and the board
- Lead the detection, investigation, containment, and recovery of security incidents
- Maintain incident response playbooks, coordinate with external forensic specialists, legal counsel, and communications teams, and conduct post-incident reviews to drive continuous improvement
- Integrate security throughout the software development lifecycle through threat modeling, secure architecture reviews, code reviews, security testing, dependency scanning, and practical secure coding standards
- Partner with infrastructure teams to strengthen security across AWS, Kubernetes, networking, and CI/CD pipelines
- Oversee identity and access management, least-privilege controls, secrets management, and security practices for Terraform and GitOps workflows
- Develop and improve security monitoring, logging, alerting, and detection capabilities across applications, infrastructure, and access systems
- Optimize detection rules to identify malicious activity early while minimizing false positives
- Define and maintain security controls for cryptographic keys, wallets, custody operations, and blockchain integrations supporting payment infrastructure
- Collaborate with Product and Risk teams to strengthen defenses against account takeover, fraudulent activity, abuse, and suspicious transactions
- Establish security guardrails for AI-assisted coding tools, AI agents, and LLM-powered systems
- Address risks such as prompt injection, unauthorized tool access, excessive agent permissions, and sensitive data exposure
- Lead the security compliance program, including SOC 2 and other relevant frameworks, audit preparation, customer assessments, and security questionnaires
- Integrate compliance requirements into everyday engineering practices
- Manage vendor security assessments and due diligence for strategic partners, investors, acquirers, and other external stakeholders
- Establish risk-based remediation timelines and severity-based SLAs, coordinating with engineering teams to address vulnerabilities efficiently without creating unnecessary delivery bottlenecks
