Security Architect

About AiPrise

AiPrise is a global compliance orchestration platform helping fintechs, marketplaces, and payment companies verify and onboard customers worldwide. We integrate with 80+ identity and compliance vendors to deliver a holistic view of risk. We're building AI-powered compliance agents to revolutionize KYB, AML, sanctions screening, and risk scoring—enabling faster onboarding, reduced manual reviews, and financial crime prevention.

About the Role

We seek a Security Architect to own platform security end-to-end across infrastructure, applications, and APIs. This is a hands-on builder role where you'll work directly with engineers to identify and fix real security issues, set standards, and translate regulatory requirements into practical controls the team can ship. You'll be the technical face of security with auditors, enterprise customers, and regulators, joining as an individual contributor with opportunity to lead and build a team as security grows.

Key Responsibilities

• Own security architecture across cloud infrastructure, applications, and APIs as the platform evolves into new products and regions
• Work directly with engineers to identify, prioritize, and remediate security issues; review designs, pair on fixes, and validate solutions
• Perform threat modeling and security design reviews for new services and significant changes
• Embed security into the development lifecycle: secure coding standards, code review, CI/CD controls, dependency and container security
• Define and maintain security standards, reference architectures, and hardening baselines; drive adoption across engineering
• Lead and coordinate security testing including penetration tests, vulnerability management, and remediation tracking
• Translate industry and regulatory security and privacy requirements into concrete technical and organizational controls
• Own the technical side of audits and assessments: SOC 2, ISO 27001, enterprise security reviews, and regulatory reviews
• Represent security in customer-facing conversations: security questionnaires, due-diligence calls, and trust discussions with prospects and auditors
• Partner with privacy and data-protection functions to ensure controls meet GDPR and applicable data protection obligations