Job
Description
As the Lead Security Engineer, you will play a pivotal role in ensuring the confidentiality, integrity, and availability of sensitive data across our systems. Your primary responsibility will involve leading the data security strategy and execution to mitigate risks and protect our data from evolving cyber threats. Collaboration with cross-functional teams, including engineering, compliance, and operations, will be essential to implement best practices for data protection and compliance with industry regulations such as GDPR, CCPA, PCI-DSS, and others. Your key responsibilities will include developing and executing a comprehensive data security strategy aligned with the company's business objectives and regulatory requirements. You will design and implement robust data protection frameworks encompassing encryption, data masking, tokenization, and data loss prevention (DLP) systems. Regular risk assessments will be conducted to identify data vulnerabilities, and appropriate mitigation strategies will be recommended and implemented to safeguard sensitive financial data. You will also ensure compliance with all applicable data security regulations and standards, manage audits and assessments, and lead efforts in investigating and responding to data security incidents. Collaboration with product, engineering, and IT teams will be necessary to integrate security best practices into the software development lifecycle (SDLC) and cloud infrastructure. You will design secure data architectures supporting scalable, high-performance systems while minimizing exposure to data breaches. Additionally, you will lead, mentor, and grow a team of data security engineers, fostering a culture of continuous learning and improvement. Security awareness training will be provided to internal teams, educating them on the latest data security threats, trends, and best practices. Assessing third-party vendors" security posture and collaborating on securing data exchanges with partners and clients will also be part of your responsibilities. Implementing monitoring systems to detect data security threats and providing regular reporting on the organization's data security posture to senior leadership is crucial. Qualifications: - Experience: 7+ years of experience in data security, with at least 3 years in a leadership or senior role within a fintech or similar regulated environment. - Technical Expertise: Strong knowledge of data encryption technologies, cloud security (AWS, Azure, GCP), data loss prevention (DLP), identity and access management (IAM), and security protocols (e.g., TLS, VPNs). - Regulatory Knowledge: In-depth understanding of data security regulations and standards (GDPR, CCPA, PCI-DSS, SOC 2, etc.) and experience leading compliance efforts. - Risk Management: Proven experience conducting risk assessments, threat modeling, and implementing mitigation strategies in a highly regulated environment. - Incident Response: Hands-on experience leading data breach investigations and managing data security incidents from identification to resolution. - Leadership Skills: Strong leadership, mentoring, and team-building capabilities, with a proven ability to drive cross-functional collaboration. - Problem-Solving & Analytical Thinking: Excellent analytical and troubleshooting skills with a strong attention to detail. - Certifications: CISSP, CISM, CISA, or other relevant certifications are highly desirable. Preferred Qualifications: - Experience with DevSecOps practices, security automation, and CI/CD pipeline integration. - Familiarity with advanced threat detection technologies like SIEM, EDR, and SOAR platforms,
