Senior Security Engineer

About Us

 Sunbit builds financial technology for real life. Our technology eases the stress of paying for life’s expenses by giving people more options on how and when they pay. Founded in 2016, Sunbit offers a next-generation, no-fee credit card that can be managed through a powerful mobile app, as well as a point-of-sale payment option available at more than 16,000 service locations, including auto dealership service centers, optical practices, dentist offices, veterinary clinics, and specialty healthcare services. Sunbit was included on the 2022 Inc. 5000 list. The financial technology company has also been named as a Most Loved Workplace®, Best Point of Sale Company, and as a Top Fintech Startup by CB Insights. We use cutting-edge innovations in financial technology to bring leading data and features that allow individuals to be qualified instantly, making purchases at the point-of-sale fast, fair and easy for consumers from all walks of life. We create value focused on our core values; we work tirelessly to ensure that Sunbit becomes available to everyone, everywhere.

We invite you to #UnleashYourCuriosity and join our ever-growing R&D organization.

Check out the open positions & feel free to reach out with any questions!

What You’ll Do:

The Security Architect plays a pivotal role in defining and advancing Sunbit’s security posture. This individual will lead and manage security projects from inception to rollout and will be responsible for designing, developing, and implementing a robust security architecture aligned with Sunbit’s business goals and risk management strategies. Adept at data security and well-versed in emerging cybersecurity trends, the ideal candidate will ensure the resilience and security of our systems against evolving threats.

Responsibilities:

• Design and Develop Security Architecture:
• Lead the development and maintenance of a comprehensive security architecture framework, aligning with Sunbit’s business objectives and risk tolerance.
• Design security models and controls, ensuring the security, integrity, and confidentiality of sensitive data and our systems.
• Security Solutions & Project Management:
• Evaluate, recommend, and lead the implementation of advanced security solutions.
• Manage security projects from inception to rollout, collaborating with IT, development, and various business units to ensure secure and timely delivery.
• Threat and Risk Assessment:
• Proactively identify and assess security risks, vulnerabilities, and formulate mitigation strategies.
• Conduct regular vulnerability assessments and drive remediation activities, focusing on data security aspects.
• Policy Development and Compliance:
• Develop, refine, and maintain security policies, standards, and procedures with an emphasis on data security.
• Ensure compliance with internal security policies and applicable laws and regulations, addressing both organizational and data-centric security needs.
• Stakeholder Collaboration & Communication:
• Engage with a range of stakeholders including CISO, IT, legal, and business units, to align security initiatives with business goals.
• Clearly communicate security concepts, risks, and mitigations to both technical and non-technical stakeholders.
• Security Awareness & Culture:
• Develop and deliver security awareness training focusing on data security.
• Foster a culture of security mindfulness across the organization.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field. Advanced security certifications such as CISSP, CISM, or SABSA are highly advantageous.
• Minimum of 7 years in information security, with at least 3 years in a security architect role, preferably in the fintech or financial services sector.
• Skills:
• Profound expertise in security architecture, design, and assessment, particularly regarding data security.
• Solid knowledge of cybersecurity threats, vulnerabilities, risk management, and mitigations.
• Familiarity with security frameworks, standards, and best practices (e.g., SOC2, ISO 27001, NIST).
• Exceptional analytical, organizational, and problem-solving skills.
• Strong interpersonal and communication skills.