Were looking for our next Manager, Cybersecurity Engineering. Could It Be You?
As the Manager of Cybersecurity Engineering, you will lead and grow a team of security architects dedicated to embedding security into our engineering culture in alignment with our regulatory compliance requirements as a Financial Services provider. Reporting to the Director of Cyber Strategy & Risk, you will own the team's technical direction and its impact on the organization's overall security posture - spanning architecture oversight and threat modeling, legacy system risk, security guardrails and automation, and M&A security diligence. You will balance technical leadership with people management, establishing your team as a trusted consultative partner that enables safe innovation across cloud-native financial platforms, legacy systems, and corporate integrations.
The Manager, Cybersecurity Engineering is a champion for putting the customer first and has a deep passion in understanding customer behaviour. They will create lifecycle journeys to improve the customer experience, engagement and retention as we deliver on our promise to help customers keep more of their money as they become more financially successful and secure.
Requirements: A Foundation in Engineering Leadership: 10+ years of technology experience, including a significant background in software engineering, solutions architecture, and DevSecOps/DevOps/SRE, with a deep understanding of how modern applications are designed, built, and deployed.
People Management Experience: 3+ years directly managing or formally leading technical teams, ideally including senior architects or principal-level engineers, with a track record of hiring, developing, and retaining strong technical talent.
Financial Services / Multi-Entity Experience: Prior experience providing security advisory in regulated environments, multi-entity corporate structures, or financial technology platforms is preferred.
Deep Application Security Expertise: 5+ years in application, product, or cloud security architecture, with the ability to evaluate and guide architectural mitigations for OWASP Top 10 and design-level vulnerabilities in a microservices architecture.
Cloud Security Architecture: Demonstrated experience defining architecture patterns and conducting security assessments in cloud-native platforms, specifically Google Cloud Platform (GCP); familiarity with AWS or Azure is beneficial.
Expertise in Securing Distributed Systems: Strong understanding of security design patterns for microservices architectures, containerized environments (Kubernetes), and event-driven systems, including API gateways, service mesh concepts, secrets management, and network policies.
Pragmatic Threat Modeling Expertise: Proven background leading and overseeing architectural threat modeling exercises (e.g., STRIDE or similar frameworks) across cloud-native and distributed environments, and translating theoretical threats into actionable architecture guardrails and engineering requirements.
Emerging Technologies: Familiarity with secure architecture considerations for Generative AI integration, agentic workflows, and modern data platform architectures.
Excellent Communication and Influence: Exceptional ability to articulate complex technical risks and solutions to both senior engineers and executive stakeholders to drive consensus and prioritization.
Budget and Vendor Management: Experience managing team budgets and evaluating security tooling or vendor relationships is a plus.
Relevant security, application security, and security architecture certifications (e.g., CISSP, CSSLP, GIAC) are beneficial.
This position is open to all candidates.