Security Architect  

• Reviewing current system security measures and recommending and implementing enhancements.
• Advise development team members on proper implementation of the Software Security Development Lifecycle policy and how it applies to their product and threat model.
• Anticipating possible security threats and identifying areas of weakness in a network system.
• Monitor each phase of the software development process and attest to successful useful completion of each security requirement and activity throughout the development lifecycle.
• Promptly responding to all security incidents and providing thorough post-event analyses.
• Attest to compliance (or non-compliance) with security and privacy requirements in the Product Development Process and during related stage gate reviews.

General Requirements:

• 5-10 years experience in information security and IT risk management.
• Must have certification in any of InfoSec or Cyber security eg. CEH, CISSP, ISSAP, CISM, CSSA, etc.
• Familiar with PCI-DSS standards.
• A track record of successful delivery working across multiple teams, on multiple products in a fast-paced, market-driven environment.
• Financial Services/ Payment /Fintech industry experience.

Soft Skills:

• Strong communication (verbal and written) and presentation skills.
• Has strong interpersonal skills, with the ability to quickly build relationships across all departments and levels internally and externally.
• Solution and results-driven attitude with the ability to respond quickly to and manage change.
• Ability to simplify complex solutions.
• Good problem-solving, analytical, synthesis, system thinking, and solutioning skills.

Technical Skills:

• Knowledge and experience with identifying and understanding the most common application security vulnerabilities (OWASP Top 10).
• Capable of creating security documentation to support architecture decisions.
• Knowledge of cloud security controls including tenant isolation, encryption at rest, encryption in transit, and various security controls.
• In-depth knowledge of web technologies such as Web Browsers, Web Servers, and Web Services.