Security Architect (Fintech)

Location: London, United Kingdom; hybrid workplace type. The role also states that employees can work from anywhere in the world as part of the fully distributed organisation.

Company

hirify.global provides a payment orchestration platform for airline, travel, hospitality and e-commerce brands.

What you will do

• Provide security guidance across platform, application and infrastructure architecture initiatives.
• Embed security into products, services and platform capabilities in partnership with Architecture and Engineering.
• Lead security initiatives for PCI DSS, GDPR, ISO 27001 and SOC 2 compliance programmes.
• Drive DevSecOps and Shift-Left Security adoption across engineering teams.
• Improve Google Cloud security controls, Kubernetes security, disaster recovery and resilience for critical systems.
• Support API security, gateways, authentication frameworks, customer onboarding, risk reduction and compliance assessments.

Requirements

• 5+ years of experience in Cyber Security, Security Engineering or Security Architecture roles.
• Experience designing and implementing security controls across cloud-native environments and modern cloud-based engineering organisations.
• Experience with Google Cloud Platform or another major cloud provider, including cloud security principles and best practices.
• Good understanding of Kubernetes security, preferably in GKE environments.
• Deep understanding of web application security and secure software development practices.
• Experience securing APIs, API gateways, modern integration architectures, authentication and identity management solutions.
• Experience implementing DevSecOps and Shift-Left Security initiatives.
• Knowledge of vulnerability management, risk assessment and security governance.
• Experience supporting security and compliance frameworks including PCI DSS, GDPR, ISO 27001 or SOC 2; experience in fast-paced technology, fintech or SaaS organisations.
• Strong communication skills and the ability to balance security requirements with business and operational objectives.

Nice to have

• Experience in payments, fintech or other highly regulated industries.
• Experience supporting PCI DSS certification programmes and using security tooling across Kubernetes and cloud-native environments.
• Knowledge of Zero Trust security principles.
• Experience supporting ISO 27001 and SOC 2 compliance initiatives.
• Familiarity with fraud prevention, payment security and customer authentication technologies.

Culture & Benefits

• Hybrid role in London within a globally distributed, remote-first organisation; the posting also states that work can be performed from anywhere in the world.
• Medical insurance with dependent coverage, including spouse, children and parents where applicable.
• Opportunity to influence company-wide security strategy and work on complex payment-platform challenges.
• Competitive salary and ongoing personal and professional growth opportunities.
• Inclusive environment focused on diverse perspectives, innovation and professional ownership.