Privacy & Security Specialist

Who We Are

FlexPay is the first to market and global leader in failed payment recovery. Our outstanding success is built upon a solid foundation of exceptional culture, adherence to our values, and an innovative AI-driven approach to solving this trillion-dollar problem. FlexPay helps subscription businesses accelerate revenue and profit growth by recovering failed payments, which is the single largest cause of customer churn.

We’re a maturing, institution-backed Fintech SaaS, solving one of the biggest problems faced by merchants. The veteran management team of serial entrepreneurs is supported by a board filled with industry leaders. Our ambition is to redefine payments and in doing so become more than just the next great unicorn, but to become a key element of the infrastructure that makes our world’s economy hum.

We’re a dynamic, welcoming company that strives to hire the best and brightest people. If you are looking for a place to invest your passion, then keep reading!

What The Role Looks Like

Reporting to the VP of Engineering, we are looking for a passionate Security Specialist to head Privacy and Security activities at FlexPay. The ideal candidate has a background in application security with expertise in governance and compliance. As the Privacy & Security Specialist, you will play a crucial role in safeguarding the FlexPay platform, infrastructure, and sensitive data assets.  

A day in the life of the Privacy & Security Specialist includes:

• Planning, developing, and managing security strategy, policy, architecture, standards, programs and processes.
• Creating and maintaining privacy and security policies, procedures, and guidelines that align with industry best practices and standards.
• Coordinating and conducting regular privacy and security audits and assessments including PCI and SOC.
• Ensuring compliance with relevant legislation.
• Conducting regular risk assessments, identifying vulnerabilities and threats, and establishing risk mitigation strategies.
• Actively participating in FlexPay’s security incident response, including incident detection, containment, recovery, and post-incident analysis.
• Recommending and implementing cyber security tools, technologies, and solutions to enhance FlexPay’s security posture.
• Ensuring security measure alignment of third-party vendors and service providers.
• Collaborating to define, evaluate, and assess security architecture requirements for the FlexPay platform.
  
  

Who We’re Looking For

You are passionate about all things security and privacy. You are driven to contribute to a culture of learning and teaching. You love challenging yourself to constantly improve and sharing your knowledge to empower others.

You like to take risks when looking for novel solutions to complex problems. If faced with roadblocks, you continue to reach higher to make greatness happen. You care about solving big, systematic problems and you look beyond the surface to understand root causes so that you can build long-term solutions.

What We’re Looking For

• 5+ years of progressive experience in privacy and security within SaaS and/or FinTech organizations.
• In-depth knowledge of security frameworks, cyber risk management frameworks, conducting threat risk assessments, and recommending mitigations to reduce or eliminate identified risks. 
• Knowledge of cybersecurity concepts, including threats, vulnerabilities, security operations, cloud security, encryption, defense-in-depth, auditing, authentication, risk management, and a track record of driving security solutions. 
• Strong understanding of risk management frameworks and methodology. 
• Hands on experience with security technologies, tools, and platforms. 
• Knowledge and experience working with SOC Audit reports, including SOC 2 Type 2. 
• Passion for user privacy and emerging privacy regulations (GDPR, CCPA, CPRA, CPPA). 
• Professional designation in information security, control, and governance (e.g., CISA, CISSP, CIPP, CIPT, CRISC, CDPSE, PCIP, PCI-ISA) are an asset. 
• Previous experience with payments and/or around PCI-DSS level 1, is an asset for this role. 
• Excellent communication skills with the ability to effectively communicate complex technical concepts to non-technical stakeholders. 
• Ability to work independently and make use of your time effectively
• Ability to work standard Eastern operating hours.
  
  

What We Offer 

We’re a quickly growing global company committed to building a team filled with diverse cultures, viewpoints, and experiences. As they say, variety is the spice of life. No matter how large we become, we will always be connected through our shared sense of community and slightly quirky personalities.

Benefits

Our vibrant culture is filled with talented, creative, deeply curious, high achievers. We believe in and invest in our people because we know they are the secret to our success. We are happy to extend the following benefits to our employees:

• Unlimited paid time off
• 100% remote work
• Flexible hours
• Comprehensive health benefits package effective from day one
• Support for continuous learning and development 
  
  

FlexPay is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability or any other characteristic protected by law. Accommodation is available upon request for applicants with disabilities.