This job has closed.

CellPoint Digital · 1 day ago

Security Lead

DFW Metroplex

Full-time

Hybrid

Senior Level, Lead/Staff

10+ years exp

CellPoint Digital is an innovator behind the world’s leading Payment Orchestration Platform, helping global brands turn payments into profit. They are seeking a Security Lead to define and drive their global security strategy, safeguard payment infrastructure, and lead a world-class security culture across engineering, operations, and compliance.

E-CommerceFinancial ServicesInformation TechnologyTravel

Responsibilities

Define and execute CellPoint Digital’s global information security strategy, ensuring alignment with business objectives, risk appetite, and regulatory obligations

Oversee the Information Security Management System (ISMS), ensuring continual improvement and certification under ISO 27001/27701

Establish and maintain group-wide security policies, standards, and operational procedures across all legal entities (UK, Denmark, Bulgaria, India, Philippines, and US)

Report regularly to the Executive Team and Board on security posture, risks, and mitigation actions

Take part in Business Risk and Compliance Committee meetings ("BRCC") and coordinate with Compliance, Legal, and Infrastructure leadership

Maintain and evolve compliance with PCI DSS v4.0, SOC 2 Type 2, ISO 27001, and GDPR

Act as liaison with QSAs, auditors, acquirers, and enterprise clients during audits, RFPs, and security assessments

Partner with Legal and Compliance to ensure secure handling of payment data and customer information across global jurisdictions

Oversee third-party risk management and due diligence of vendors, processors, and cloud providers

Lead and develop the Security Operations Centre (SOC), ensuring continuous monitoring, detection, and response to incidents

Oversee vulnerability management, penetration testing, and incident response processes

Implement best-practice controls for network, application, and cloud security, including encryption, IAM, and zero-trust principles

Integrate DevSecOps practices across the OSO platform and CI/CD pipelines to ensure security-by-design

Manage key management, tokenisation, and secure transaction flow architectures critical to PCI compliance

Ensure technical and organisational measures align with GDPR and other applicable data protection laws

Support the DPO and Legal team with privacy impact assessments (PIAs), breach management, and data-subject requests

Oversee DLP (Data Loss Prevention) and access control frameworks for customer, partner, and employee data

Build, mentor, and lead a high-performing global security team covering governance, compliance, and technical domains

Promote a strong security-first culture across engineering, product, and operations teams through awareness and training

Serve as the company’s key spokesperson and trusted advisor on all information security matters for clients, investors, and partners

Qualification

Information Security StrategyPCI DSS ComplianceISO 27001 CertificationCloud Security (AWS/Azure)Incident ResponseVulnerability ManagementDevSecOps IntegrationStakeholder ManagementSecurity Awareness TrainingData Protection LawsTechnical Security CultureProfessional CertificationsTeam Leadership

Required

10+ years of experience in information security, with at least 5 years in a role within a fintech, payments, or financial services environment

Proven success managing security programs compliant with PCI DSS v4.0, ISO 27001, SOC 2, and GDPR

Strong knowledge of payment orchestration, card data environments, tokenisation, and transaction-flow architectures

Hands-on experience securing cloud-native (AWS/Azure) microservice architectures

Strong background in incident response, vulnerability management, and DevSecOps integration

Excellent stakeholder management skills and experience engaging at C-suite and board level

Preferred

Professional certifications such as CISSP, CISM, CISA, PCI ISA/QSA, or ISO 27001 Lead Implementer/Auditor

Benefits

Rewards & Recognition system

Opportunity for personal and professional growth in a dynamic industry

Work from anywhere in the world; we're a fully distributed company, and we provide the tools, culture, and support to make your work setup work for you

Joining a scaling company that is growing and an opportunity to have great impact

Occasional travel to Europe (UK, Copenhagen, Bulgaria) and India.