Security Architect (Bangalore, India)

About AiPrise

AiPrise is a global compliance orchestration platform helping fintechs, marketplaces, and payment companies verify and onboard customers worldwide. We integrate with 80+ identity and compliance vendors to deliver a holistic view of risk. We're now building AI-powered compliance agents to revolutionize KYB, AML, sanctions screening, and risk scoring — enabling our customers to onboard faster, reduce manual reviews, and prevent financial crime.

About the Role

We are looking for a Security Architect to own the security architecture of our platform end to end, across infrastructure, applications, and APIs, and to be hands-on in making it better. This is a builder’s role, not a paper one. You will work shoulder to shoulder with engineers to find and fix real security issues, set the standards that keep them fixed, and translate a demanding regulatory landscape into practical controls the team can actually ship.

You will also be the technical face of security in the rooms that matter: with auditors, with enterprise customers’ security teams, and with regulators. You will join as an individual contributor with the depth to lead by doing, and as the security team grows you will have the opportunity to build and manage a team of your own.

What You’ll Do

• Own the security architecture across cloud infrastructure, applications, and APIs, and evolve it as the platform grows into new products and regions.

• Work directly with engineers to identify, prioritize, and remediate security issues in infrastructure, application code, and APIs, reviewing designs, pairing on fixes, and validating that they hold.

• Perform threat modeling and security design reviews for new services and significant changes, and embed security into the development lifecycle (secure coding standards, code review, CI/CD controls, dependency and container security).

• Define and maintain security standards, reference architectures, and hardening baselines, and drive their adoption across engineering.

• Lead and coordinate security testing, including penetration tests, vulnerability management, and remediation tracking, and hold findings to closure within defined timelines.

• Translate industry and regulatory security and privacy requirements into concrete technical and organizational controls, and keep them current as obligations change.

• Own the technical side of audits and assessments, including industry and certification audits (for example SOC 2 and ISO 27001), enterprise-customer security reviews, and regulatory reviews, covering evidence, control mapping, and remediation of findings.

• Represent security in customer-facing conversations, including security questionnaires, due-diligence calls, and trust discussions with prospects, customers, and their auditors.

• Partner with the privacy and data-protection function to ensure controls meet GDPR and other applicable data protection requirements, with particular care for personal and biometric data.

• Contribute to incident readiness and response, including detection, investigation, and post-incident improvement.

• As the team grows, mentor and eventually manage junior security engineers, setting technical direction, reviewing work, and developing the team.

The rest of this description is on the employer’s own page.