Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and WeBull, and more than 20 million of our clients' customers.
Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. We are based in Dallas, TX and also have offices in Austin, New York, Chicago, Los Angeles, Portland, and Belfast.
If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you.
AFS has received a number of prestigious industry awards, including:

• 2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards
• 2021 Most Innovative Companies - presented by Fast Company
• 2021 Best API & Best Trading Technology - presented by Global Fintech Awards

Apex Fintech Solutions (AFS) is seeking a Senior Information Security Architect. This position will report to our CISO and will be responsible for our Information Security Architecture with functions including, but not limited to, security architecture and engineering, application security, cloud security, security strategy and building security control requirements.
This leadership position requires an adaptable person, comfortable and apt at development of strategy, vision and personnel management as well as tactical problem-solving, and hands-on troubleshooting as needed. The Sr. Infosec Architect will lead the strategic development and integration of security controls in application/product development and the various cloud instances managed by Apex. You will also be responsible for defining and executing AFS strategy for secured services delivery and overall security architecture requirements.
Responsibilities

• Develop security architecture, design, and coding standards across the organizations infrastructure to promote a standardized set of security requirements, aligning with internal policies and meeting external compliance requirements
• Develop and maintain centralized security design reference architecture based on an aligned common set of security standards
• Collaborate with key stakeholders (e.g., IT infrastructure, SRE, Software and Application Architects, IT Operations, Product Management, Engineering etc.) to engineer technology solutions and processes that incorporate sound security design and governance principles.
• Serve as a subject matter expert and embed security seamlessly into the development lifecycle of technology systems, cloud infrastructure, applications, and products.
• Participate in the design, lifecycle management, and total cost of ownership of security appliances, applications, and infrastructure services
• Provide solutions security-related coaching and mentoring to elevate security expertise of development teams
• Leads and facilitates meetings with cross-functional teams to establish the creation of current and future state information security models; analyzes impacts to current architectures, processes, and procedures; creates recommendations and proposals. Works with developers and IT Engineers during new product design to help ensure security best practices are implemented.
• Lead and coordinate technical reviews (architectural, security, compliance, etc.)
• Provide technical leadership in selecting and seamlessly implementing next-generation security solutions that enable the business to remain agile, efficient, and innovative
• Provide support in the evaluation of currently deployed security measures, re-architect, integrate, deploy, and optimize to improve cyber resiliency.
• Document and design enterprise security requirements and controls for both on-premises and cloud-based environments based on security best practices of zero trust and defense in depth and alignment with company Information Security Standards
• Create performance metrics (KPI | KRI) to measure the effectiveness of new and existing cybersecurity capabilities, tools, and services

Required Qualifications

• 10+ years of progressively responsible, demonstrable professional experience in information security with ability to effectively plan, lead and organize teams and programs.
• Problem-solver with excellent communication skills, a deep technical understanding of security engineering best practices.
• Extensive experience and proficiency in secure architecture, system design and engineering
• Expertise in the design, development, implementation, and maintenance of enterprise application and security architecture across multiple Cloud environments
• Experience in using industry standards, such as SOC2, ISO/IEC 27001, NIST, Cloud Controls Matrix; experience working with hybrid information security frameworks is a plus.
• Experience with API Security, Microservices, Containers and Kubernetes
• Bachelor's degree or equivalent work experience

Core Characteristics

• Organization and people leader - previously built and led senior technical staff, especially architects
• People builder - mentoring and coaching of staff
• Strategic thinker - understands business demand & constraints; synthesize problem statements from observed challenges, and finds an organizational solution
• Passionate technologist - explores new & emerging trends; finds and understands potential business value in a technology, and can bring that to the organization
• Understands how to navigate in a large enterprise - obtain executive support, and rally people behind a cause
• Change agent - challenges status quo; leads through business and technology transformations

#IT #mid-senior #full-time