Security Architect

This Security Architect sits within the Cybersecurity Division’s PCI Architecture Group, supporting the security governance of a fintech payment platform. The team works across PCI DSS compliance, security design, risk assessment, information-asset management, and controls that help services develop safely.

The role interprets PCI DSS requirements, supports compliance checks and improvements, reviews security designs for system changes, defines project security requirements, and improves security rules and operating processes. It also handles security consultations, risk visibility and response planning, incident-response support, prevention measures, training, and knowledge sharing. The work covers system and cloud-service security requirements rather than a single application stack.

Applicants need practical PCI DSS experience, such as compliance support, requirement handling, QSA or ISA assessment or audit support, or SAQ preparation. They also need experience organizing, reviewing, or assessing security requirements for systems or cloud services, plus experience driving issues from discovery through planning and execution while building agreement among diverse stakeholders.