Security Technical Program Manager

Qualifications

• Education: Bachelor's or Master's degree required in Cybersecurity, Information Technology, Computer Science, or a related technical field.
• Core Experience: 2+ years of progressive experience in Technical Program Management (TPM), driving complex Information Security, Application Security, or Cyber Risk initiatives within highly scalable technology environments.
• Industry & Domain Requirement: Extensive experience operating within the Financial Services and global Payments Industry space is required. Must possess a deep structural understanding of high-stakes financial platform mechanics, transaction processing lifecycles, and payment clearing rails.
• Information Security Compliance & Audit Mastery: Proven track record of managing, executing, and delivering complex end-to-end audits for strict financial and core data privacy frameworks, with mandatory proficiency in PCI-DSS (v4.0), SOX, SOC 1, and SOC 2. Thorough working knowledge of emerging international standards (e.g., DORA) is highly preferred.
• Technical & AI Depth: Solid foundational understanding of modern cloud architectures (AWS/GCP/Azure), automated Secure-SDLC engineering pipelines, the OWASP Top 10 for LLMs, and automated enterprise vulnerability management systems- all in the spirit of protecting Flywire global payment ecosystem from bleeding-edge threats.
• Core Security & Compliance: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CCSK (Certificate of Cloud Security Knowledge).
• Audit Focused: CISA (Certified Information Systems Auditor).
• Program Execution: PMP (Project Management Professional) or certified Agile/Scrum Master.
• Fintech/Financial Services Security Compliance Specialist: Exceptional ability to translate dense, high-stakes financial compliance requirements and complex technical vulnerabilities into frictionless, highly scannable, and actionable engineering remediation plans.
• Automation & Optimization Mindset: Demonstrated ability to look at legacy program management frameworks and replace manual, repetitive checkpoints with intelligent automation, workflows, and enterprise AI tools.
• Influence Without Authority: Natural leadership presence with a demonstrated ability to align, motivate, and drive cross-functional software engineers, product managers, and external financial regulators across globally distributed time zones.
• High-Pressure Decision Making: Impeccable resilience and analytical clarity in high-pressure scenarios, with the ability to manage transparency and guide risk-based decisions during active security incidents or compressed financial product launch windows.
• Strategic & Tactical Balancer with a Commercial Mindset: Highly hands-on and technically skilled. Strong strategic thinker with the ability to contribute to and translate team/program’s high-level vision into actionable plans and drive successful execution. Balances technical risk reduction with business enablement, ensuring security infrastructure serves as a competitive advantage that unblocks global revenue and enterprise-client acquisition.