Senior Manager Information Security (Fintech)

Location: Kazakhstan; workplace type: onsite

Company

hirify.global is a fintech company providing flexible payment solutions that help shoppers split payments online and in stores.

What you will do

• Lead the information security function and manage a team of security engineers and analysts.
• Conduct security architecture and technical reviews across cloud, infrastructure, and product initiatives.
• Design and implement security controls across AWS and GCP, including IAM, CSPM, and cloud-native security.
• Drive Secure SDLC and DevSecOps initiatives, including SAST, DAST, SCA, and container security.
• Lead vulnerability management, penetration testing, VAPT, red and purple team engagements, and incident response.
• Develop threat detection, SIEM use cases, security monitoring, endpoint and network security, and security tooling.

Requirements

• Senior technical or management experience leading information security or cybersecurity functions.
• Deep expertise in cloud security, security architecture, VAPT, application security, DevSecOps, and defensive security.
• Strong knowledge of AWS, GCP, IAM, CSPM, SIEM, EDR/XDR, vulnerability management, and CI/CD security.
• Experience with penetration testing, red and purple teaming, threat hunting, incident response, and threat modelling.
• Experience in a regulated fintech or banking environment, with knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001, and SOC 2.
• Proven people leadership, stakeholder management, and strategic decision-making skills.

Nice to have

• CISSP, CISM, OSCP, or equivalent certifications.

Culture & Benefits

• Cross-functional collaboration with Engineering, Infrastructure, Product, IT, Legal, and Compliance teams.
• Opportunity to shape security standards, best practices, operating procedures, and programmes.
• Full-time onsite work in Kazakhstan.

Hiring process

• Application and review.
• HR call followed by a technical interview.
• Final interview and hiring decision.