Technical Program Manager, Information Security

Responsibilities

• Design, implement, and maintain technical and operational controls for SOC 2, ISO 27001, GDPR, DORA, and future regional requirements
• Ensure controls are enforced within AWS, Kubernetes, and application layers
• Translate regulatory language into concrete security mechanisms in partnership with Legal and Compliance
• Own audit preparation, evidence collection, walkthroughs, and remediation tracking
• Build repeatable, automated evidence pipelines to reduce manual compliance work
• Work with engineering to design systems that are secure by default and defensible to regulators
• Build tooling and scripts to continuously validate controls, such as access reviews and config drift

Requirements

• 6+ years in security engineering, cloud security, or compliance-focused security roles
• Hands-on experience supporting SOC 2, ISO 27001, GDPR, DORA, or similar regulatory frameworks
• Ability to translate regulatory requirements into technical controls
• Strong working knowledge of AWS security fundamentals (IAM, logging, encryption, networking)
• Experience building or automating security/compliance processes using Python, Bash, or Go
• Comfortable owning auditor interactions and explaining complex systems clearly

Preferred Qualifications

• Experience securing Kubernetes environments
• Familiarity with AppSec tooling (SAST/DAST, manual testing)
• Experience with AWS security services such as GuardDuty, Config, or Security Hub
• Prior work experience in fintech, payments, or regulated infrastructure
• Relevant security or compliance certifications (CISSP, CISA, ISO 27001 Lead Implementer, AWS Security)

Benefits

• Competitive salary and benefits package
• Equity in a rapidly growing company
• Opportunity to work in a fast-paced startup at the forefront of fintech innovation
• Opportunity to make a significant impact on global financial infrastructure
• Collaborative work culture with emphasis on personal and professional growth

About the Company

OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. Our team includes experience from companies like J.P. Morgan, Goldman Sachs, PayPal, and Kraken, and we are backed by top-tier investors including Accel and Faction.