Description

Key Responsibilities

Security Gap Identification & Remediation:

• Proactively identify, investigate, and assess security gaps across systems, applications, and cloud environments. Recommend and implement solutions to address vulnerabilities, ensuring issues are tracked, prioritized, and resolved efficiently.

Blockchain Security Architecture:

• Assist in designing and documenting blockchain solution architectures, embedding security best practices from inception. Support secure integration of blockchain components with existing systems and APIs, ensuring alignment with enterprise security standards.

Security Controls Implementation:

• Design, implement, and maintain security controls across cloud and on-premise environments, including identity and access management (IAM), secrets management, and encryption.

Threat Modelling & Vulnerability Management:
Conduct threat modelling, security reviews, and penetration testing to surface vulnerabilities before exploitation. Drive end-to-end remediation efforts and lead incident response activities.

DevSecOps Integration:

• Collaborate with development teams to integrate security into CI/CD pipelines, ensuring security is embedded in every stage of the delivery lifecycle.

Security Monitoring & Incident Response:

• Monitor security events, lead incident response efforts, and ensure timely and effective resolution of security incidents.

Policy, Standards & Compliance:

• Develop, enforce, and maintain security policies, standards, and procedures. Support compliance efforts with frameworks such as SOC 2, ISO 27001, NIST, and PCI-DSS.

Security Tools & Technology Evaluation:

• Evaluate and implement security tools and technologies to strengthen the overall security posture of Kinexys platform and stripes.

Stakeholder Engagement & Training:

• Provide security guidance and training to internal teams, promoting a security-first culture. Collaborate with risk and control partners to ensure alignment and transparency.

Executive-Level Reporting:

• Provide regular updates to executive sponsors on security health, remediation progress, risks, and compliance status. Translate technical findings into business impact and actionable recommendations.

Key Skills & Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Engineering, or related field.
• 7+ years’ experience in security engineering, preferably in financial services, blockchain, or technology environments.
• Deep expertise in security architecture, cloud security, blockchain security, and DevSecOps practices.
• Strong experience with security tools, threat modelling, penetration testing, and incident response.
• Proven track record of driving remediation efforts and leading security programs in complex environments.
• Familiarity with compliance frameworks (SOC 2, ISO 27001, NIST, PCI-DSS).
• Exceptional analytical, problem-solving, and communication skills, with the ability to influence and present to executive sponsors

Key Skills

Education

Bachelor's or Master's degrees