VP Cyber Security, Enterprise Architect

Job not on LinkedIn

October 8

🗽 New York – Remote

Although this job is listed in New York, this company may be open to hiring remote in other states.

💵 $202k - $224.5k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

Apply Now

Receive Emails with Similar Jobs

CardWorks

WebsiteLinkedInAll Job Openings

Finance • Banking • Fintech

CardWorks is a credit and payments company that operates as a direct consumer lender, payment processor, and loan/credit servicer. Through its affiliated Merrick Bank and other entities, it issues general-purpose and secured credit cards, provides recreational and installment lending, merchant acquiring and bank sponsorship for ISOs, PayFacs, ISVs and fintechs, and delivers end-to-end servicing (including primary, backup, and post-charge-off recovery) enabled by data, technology and compliance-focused operations. The company serves consumers, banks, and payment industry clients with scalable servicing, risk management, and payment processing solutions.

1001 - 5000 employees

Founded 1987

💸 Finance

🏦 Banking

💳 Fintech

📋 Description

• Own the enterprise security architecture framework, continuously evolving it to address new threats. • Design comprehensive security architectures, strategies, policies, and standards to align with business objectives and regulatory requirements (e.g., NIST CSF, GLBA, SOC2, PCI, FFIEC). • Develop and maintain security architecture and supporting documentation. • Identify and communicate emerging security threats to the CISO and other senior business leaders. • Assess latest cybersecurity technologies, trends, and developments. • Communicate this to the Office of the CISO for relevance and potential integration. • Work with all technology teams to assist with secure designs, including but not limited to: Network design, Application, cloud, data transfer, PCI, secure end user compute, access controls, vendor monitoring, etc. • Partner with software development, engineering, and infrastructure teams to integrate security-by-design principles into all phases of solution delivery, including DevSecOps pipelines, cloud, and on-premise network architecture. • Design security patterns and controls to promote enterprise efficiency and transparency. • Evaluate security architecture and security control baselines for all technology within the enterprise. • Identify design gaps and recommend changes/enhancements. • Provide expert guidance and consultation related to security matters across the organization, particularly for the senior members of the Cybersecurity Team and IT leadership. • Coach and mentor less experienced personnel on cybersecurity principles and implementation, fostering a culture of security best practice. • Prepare and deliver senior management-level presentations to communicate trends, threats, and current security posture.

🎯 Requirements

• Master’s degree in computer science, information security, or related technical field, equivalent certifications, or equivalent work experience is required. • 10+ years of experience in enterprise architecture, cybersecurity architecture, or related leadership roles. • Deep technical security engineering experience with several of the following: network security (firewalls, IDS/IPS, VPN), IAM, encryption, SIEM, IaaS, PaaS, SaaS, Secure SDLC, DevSecOps, API security, and endpoint protection. • Extensive experience working in environments requiring security frameworks/regulations such as FFIEC, GLBA, PCI-DSS, SOX, SOC2. • Proven experience in designing secure, scalable, and resilient cloud-native and hybrid architecture. • Strong technical writing skills. • Relevant certifications are highly desirable (e.g., CISSP, CISM, ISSAP, TOGAF, AWS/Azure Architect). • Excellent communication and stakeholder engagement skills are required, along with the ability to influence both technical and non-technical audiences.

🏖️ Benefits

• Medical, Dental, and Vision (plus much more) • 401(k) Plan with Company Match • Short- & Long-Term Disability • Wellness Programs • Group Life and AD&D Insurance • Paid Vacation, Sick Days and bank Holidays • Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition