Responsibilities and Tasks (in order of priority)
Security Lifecycle Program Management: Lead and drive cross-functional "Security by Design" and Secure-SDLC initiatives across critical application launches, automated workflows, and emerging AI tools from ideation to deployment.
AI-Driven Process Efficiency: Actively adopt and leverage internal enterprise AI tools and Large Language Models (LLMs) to automate program tracking, streamline documentation, optimize cross-functional security workflows, and continuously drive operational efficiency.
Vulnerability & Threat Orchestration: Coordinate the end-to-end vulnerability lifecycle, partnering directly with Product, SRE, and Software Engineering to ensure rapid prioritization, tracking, and remediation of technical risks.
Information Security Compliance & Regulatory Audits: Oversee complex technical security assessments and audits to ensure continuous, strict readiness for PCI-DSS, SOX, SOC 1, and SOC 2 frameworks.
Strategic Roadmap & Operational Governance: Establish, maintain, and communicate the security engineering program roadmap, defining clear project charters, timelines, success metrics, and the technical "Definition of Done" for executive stakeholders.
Cross-Functional Enablement: Partner with high-velocity software engineering and infrastructure teams to integrate secure technical guardrails seamlessly without inducing development velocity friction.
Team Performance & Mentorship: Provide guidance and operational coaching to junior members of the security and program teams, cultivating a culture of technical excellence and collaborative risk awareness.
Here's What We're Looking For
Education: Bachelor's or Master's degree required in Cybersecurity, Information Technology, Computer Science, or a related technical field.
Core Experience: 2+ years of progressive experience in Technical Program Management (TPM), driving complex Information Security, Application Security, or Cyber Risk initiatives within highly scalable technology environments.
Industry & Domain Requirement: Extensive experience operating within the Financial Services and global Payments Industry space is required. Must possess a deep structural understanding of high-stakes financial platform mechanics, transaction processing lifecycles, and payment clearing rails.
Information Security Compliance & Audit Mastery: Proven track record of managing, executing, and delivering complex end-to-end audits for strict financial and core data privacy frameworks, with mandatory proficiency in PCI-DSS (v4.0), SOX, SOC 1, and SOC 2. Thorough working knowledge of emerging international standards (e.g., DORA) is highly preferred.
Technical & AI Depth: Solid foundational understanding of modern cloud architectures (AWS/GCP/Azure), automated Secure-SDLC engineering pipelines, the OWASP Top 10 for LLMs, and automated enterprise vulnerability management systems- all in the spirit of protecting Flywire global payment ecosystem from bleeding-edge threats.
Highly Preferred Certifications
Core Security & Compliance: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CCSK (Certificate of Cloud Security Knowledge).
Audit Focused: CISA (Certified Information Systems Auditor).
Program Execution: PMP (Project Management Professional) or certified Agile/Scrum Master.
Skills and Abilities
Fintech/Financial Services Security Compliance Specialist: Exceptional ability to translate dense, high-stakes financial compliance requirements and complex technical vulnerabilities into frictionless, highly scannable, and actionable engineering remediation plans.
Automation & Optimization Mindset: Demonstrated ability to look at legacy program management frameworks and replace manual, repetitive checkpoints with intelligent automation, workflows, and enterprise AI tools.
Influence Without Authority: Natural leadership presence with a demonstrated ability to align, motivate, and drive cross-functional software engineers, product managers, and external financial regulators across globally distributed time zones.
High-Pressure Decision Making: Impeccable resilience and analytical clarity in high-pressure scenarios, with the ability to manage transparency and guide risk-based decisions during active security incidents or compressed financial product launch windows.
Strategic & Tactical Balancer with a Commercial Mindset: Highly hands-on and technically skilled. Strong strategic thinker with the ability to contribute to and translate team/program’s high-level vision into actionable plans and drive successful execution. Balances technical risk reduction with business enablement, ensuring security infrastructure serves as a competitive advantage that unblocks global revenue and enterprise-client acquisition.
What We Offer
Competitive compensation
Employee Stock Purchase Plan (ESPP)
Competitive time off
Work with brilliant people globally Learn more about their journeys by checking out #InsideFlywire on social media
Wellbeing Programs (Mental Health, Wellness, Yoga/Pilates/HIIT Classes) with Global FlyMates
Be a meaningful part in our success - every FlyMate makes an impact
Great Talent & Development Programs (Managers Taking Flight – for new or aspiring managers, OneFlywire Career Mobility)
Submit today and get started!
We are excited to get to know you! Throughout our process you can expect to meet with different FlyMates including the Hiring Manager, Peers on the team, the VP of the department, and a skills assessment. Your Talent Acquisition Partner will walk you through the steps and be your “go-to” person for any questions.
Flywire is an equal opportunity employer and follows a policy of administering all employment decisions and personnel actions without regard to race, color, religion, sex, pregnancy, gender identity, national origin, age, ancestry, physical or mental disability, sexual orientation, genetic disposition or carrier status, veteran status, or any other category protected under applicable national, federal, state or local law.
The base salary for this position is
$98,257-$140,367
Our salary ranges are determined by role, position level, and location. The range displayed on this job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and several other factors, including job-related skills, experience, relevant education and training.
