Strengthen the security and resilience of digital financial platforms by identifying technology risks, improving security controls, and supporting the protection of sensitive financial systems and customer information.

Key Responsibilities

• Assess cybersecurity risks across fintech applications, payment platforms, APIs, cloud environments, and financial infrastructure.
• Conduct security reviews of applications, systems, integrations, and third-party technology services.
• Support vulnerability-management, threat-assessment, and security-monitoring programmes.
• Analyse security events and coordinate appropriate investigation and remediation activities.
• Work with engineering teams to integrate security controls throughout the software-development lifecycle.
• Evaluate authentication, authorisation, encryption, access-management, and data-protection mechanisms.
• Support security testing and remediation tracking for critical financial applications.
• Develop and maintain cybersecurity documentation, procedures, risk assessments, and control frameworks.
• Participate in business-continuity and technology-resilience planning.
• Assess third-party cybersecurity risks associated with fintech vendors and service providers.
• Monitor emerging cyber threats affecting financial institutions and digital-payment ecosystems.
• Prepare security reports and recommendations for technology and risk leadership.
• Promote secure engineering and operational practices across technology teams.

Professional Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• 3+ years of professional cybersecurity experience, preferably within fintech, banking, payments, or other critical technology environments.
• Knowledge of cloud security, application security, network security, IAM, vulnerability management, and security monitoring.
• Understanding of financial technology architecture and digital-payment environments.
• Strong analytical and incident-investigation capabilities.
• Familiarity with recognised cybersecurity frameworks and security-management practices.
• Relevant professional certifications are advantageous.
• Excellent communication skills and the ability to explain technical security risks to non-technical stakeholders.