• Strategic Leadership
• Develop and execute a comprehensive information security strategy aligned with business objectives
• Lead the evolution of our security program to address emerging threats and regulatory requirements
• Build and maintain relationships with key stakeholders, including board members, executives, clients, engineering leaders, and regulatory bodies
• Provide regular security status updates and metrics to the board and executive team
• Team Leadership
• Continue to evolve and grow TreviPay’s talented and driven information security team through training and coaching. Attract high performing security professionals to join the team as needed.
• Help foster a security-first culture throughout the organization
• Manage security budget
• Security Operations & Architecture
• Lead offensive security and security operations to include incident response, threat detection, vulnerability management, and forensics
• Direct the design, implementation, and maintenance of our security architecture
• Ensure the security of our cloud infrastructure and SaaS platform
• Stay current with cybersecurity threats and mitigation best practices. Work with the executive team to make strategic decisions related to the company’s security posture and investment
• Work closely with product management and engineering teams to build a deep understanding of the TreviPay product suite and technology infrastructure. Use this understanding to influence priorities and define information security requirements.
• Lead evaluation, adoption, and use of security tools and technologies
• Own the execution of annual PCI-DSS and ISO-27001 certifications to include vendor management and project management of the process.
• Ensure that data privacy requirements are understood and included in all solutions
• Work with engineering leaders to define secure coding practices, standards and training
• Compliance & Risk Management
• Maintain compliance with PCI DSS, ISO 27001, NIST, and other relevant standards
• Oversee security risk assessments and implement risk mitigation strategies
• Develop and maintain security policies, procedures, and standards
• Ensure compliance with financial services regulations and data protection laws

Required Qualifications:

• 10+ years of combined engineering and information security experience
• 3+ years of leadership experience
• Bachelor’s degree in Computer Science, Information Systems, or equivalent work experience.
• One or more of the following certifications: Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM)
• A deep understanding of and experience with one or more of the following compliance frameworks: NIST, PCI-DSS, ISO 27001, SOC 2.

​

Preferred Qualifications:

• An empowering leadership style with a proven ability to build positive, energized teams
• Excellent judgement and critical thinking skills. Able to weigh multiple and often conflicting constraints and make rapid, logical decisions in a fast-moving company with complex financial products
• Direct experience with threat hunting, penetration testing, and red teaming
• Executive-level verbal and written communications skills that can synthesize technical issues into concise points

Why you will love working at TreviPay

• Competitive salary
• Paid parental leave
• Generous paid time off
• Medical, dental, vision, FSA, Life/AD&D, long and short term disability
• 401K matching
• Employee referral program

​

At TreviPay we believe:

• in saying yes to unique and challenging requirements
• empowered team members are creative team members
• our products make the customer’s day just a little bit better
• work/life balance makes us all more effective

​

TreviPay is an Equal Opportunity and Affirmative Action Employer. We welcome all veterans and disabled applicants.

​

Individuals with disabilities will be provided reasonable accommodation to participate in the job application and/or interview process. Please contact Recruiting@trevipay.com to request an accommodation.