Information Security Lead (Fintech)

Location: Remote/Tbilisi; workplace type stated as onsite

Company

hirify.global is a fintech company providing flexible payment solutions that allow shoppers to split payments online and in stores.

What you will do

• Lead security architecture and technical security reviews across cloud, infrastructure, and product initiatives.
• Design and implement security controls across GCP and AWS, including IAM, CSPM, and cloud-native security.
• Drive Secure SDLC and DevSecOps initiatives covering SAST, DAST, SCA, and container security.
• Lead vulnerability management and participate in penetration testing, VAPT, and red/purple team engagements.
• Design threat detection and SIEM use cases, investigate complex incidents, and improve security monitoring.
• Drive endpoint, infrastructure, network, firewall, automation, security tooling, standards, and operating procedures while mentoring security engineers and analysts and partnering with Engineering, Infrastructure, Product, IT, Legal, and Compliance.

Requirements

• 5+ years of experience in Information Security or Cybersecurity, including at least 2 years in a technical leadership or senior individual contributor role.
• Experience leading Information Security or Cyber Security functions in a senior technical or management role.
• Deep expertise in cloud security, security architecture, VAPT, AppSec/DevSecOps, and defensive security.
• Experience leading security programmes and managing cross-functional initiatives.
• Strong knowledge of GCP, AWS, IAM, CSPM, SIEM, EDR/XDR, and vulnerability management.
• Strong understanding of penetration testing, red/purple teaming, threat hunting, incident response, security architecture, threat modelling, and enterprise security controls.
• Experience with SAST, DAST, SCA, and container security in CI/CD environments.
• Experience working in a regulated fintech or banking environment.
• Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001, and SOC 2, plus stakeholder management and strategic decision-making skills.

Nice to have

• CISSP/CISM and OSCP or equivalent certifications, subject to final hiring criteria.

Culture & Benefits

• Full-time employment.
• Collaboration across Engineering, Infrastructure, Product, IT, Legal, and Compliance.

Hiring process

• Application and review.
• HR call followed by a technical interview.
• Final interview and hiring decision.