Information Security Lead (FinTech)

Location: Remote/Kazakhstan; workplace type stated as onsite

Company

hirify.global is a fintech company that provides flexible payment solutions for shoppers and businesses across the GCC region.

What you will do

• Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure, and product initiatives.
• Design and implement security controls across GCP and AWS, including IAM, CSPM, and cloud-native security.
• Drive Secure SDLC and DevSecOps initiatives, including SAST, DAST, SCA, and container security.
• Lead vulnerability management and participate in penetration testing, VAPT, and red/purple team engagements.
• Design and improve threat detection, SIEM use cases, security monitoring, endpoint, infrastructure, network, and firewall security.
• Lead complex security incident investigations, automate security processes, establish technical standards, and mentor security engineers and analysts while collaborating with Engineering, Infrastructure, Product, IT, Legal, and Compliance.

Requirements

• Strong experience leading Information Security or Cyber Security functions in a senior technical or management role.
• 5+ years of experience in Information Security or Cybersecurity, including at least 2 years in a technical leadership or senior individual contributor role.
• Deep expertise in Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps, and Defensive Security.
• Experience leading security programmes and managing cross-functional initiatives.
• Strong knowledge of GCP, AWS, IAM, CSPM, SIEM, EDR/XDR, and vulnerability management.
• Strong understanding of penetration testing, red/purple teaming, threat hunting, and incident response.
• Experience with SAST, DAST, SCA, and container security within CI/CD environments.
• Strong understanding of security architecture, threat modelling, and enterprise security controls.
• Experience working within a regulated FinTech or banking environment.
• Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001, and SOC 2.
• Proven stakeholder management and strategic decision-making skills.
• CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Culture & Benefits

• Remote role based in Kazakhstan, with the workplace type also listed as onsite.
• Cross-functional collaboration with Engineering, Infrastructure, Product, IT, Legal, and Compliance.
• Opportunity to shape information security programmes for a regulated fintech business.

Hiring process

• Application and review followed by an HR call.
• Technical interview with hirify.global.
• Final interview followed by the hiring decision.