Description

You will own the product security lifecycle, from architecture reviews to compliance monitoring. You integrate security into early design phases and validate supply chain integrity.

Responsibilities

• Conduct full-stack architecture reviews for products, including consumer identity platforms.
• Perform threat modeling and prepare security outputs for internal and external stakeholders.
• Establish and monitor compliance with risk-based and regulatory cybersecurity requirements.
• Validate software supply chains and deployment pipelines for security vulnerabilities.
• Track and enforce vulnerability remediation SLAs and document risk management plans.

Required Skills

• 7+ years of experience in cybersecurity, technology architecture, or consulting.
• Expertise in ISO 27001/2, SOC 2, HITRUST, and FedRAMP standards.
• Experience implementing GRC toolsets for governance and risk management.
• CISSP certification or equivalent required.
• Knowledge of regulatory frameworks: SOX, Basel II, EU DPD, HIPAA, PCI DSS.
• Strong understanding of cloud-native architectures and API-driven services.
• Familiarity with identity and access management (IAM) and phishing-resistant authentication (WebAuthn, Passkeys).

Preferred Skills

• Experience in e-commerce, mobile apps, IoT, or medical devices.
• Additional certifications such as HCISPP, CISM, CCSP, or CISA.
• Understanding of cybersecurity risks in emerging technologies like AI and quantum computing.

Key Skills

Education

Bachelor's degree