We are seeking an experienced IT Security Architect with expertise in cloud and network security, Identity and Access Management (IAM), Privileged Access Management (PAM), and an understanding of the financial services' regulatory environment. This strategic role involves designing secure, scalable architectures and guiding the implementation of security controls across a complex, international IT landscape.

 

Key Responsibilities

1. Enterprise Security Architecture

Lead the design and evolution of enterprise security architecture in close collaboration with business, IT, and external partners. Ensure alignment of security architecture with strategic business objectives, infrastructure modernization, and cloud transformation initiatives.

2. Security Governance & Risk Management

Provide expert-level guidance on implementation of security controls to infrastructure, operations, and other stakeholders to ensure compliance with industry standards and regulations (ISO/IEC 27001, PCI DSS, GDPR, DORA, SWIFT CSP). Drive security reviews and continuous improvement programs across business units and geographies.

3. Security Architecture Consulting (with Financial Sector Focus)

Deliver security consulting at both application and infrastructure levels, with emphasis on: Financial platforms and payments infrastructure (e.g., core banking, real-time payments). IAM/PAM architecture, including RBAC, ABAC, JIT access, MFA, SSO, and federated identity (SAML, OAuth2, OIDC). API and third-party FinTech integration, applying secure patterns (e.g., token-based authentication, mTLS). Secure deployment of SaaS tools like Microsoft 365, with controls for DLP, conditional access, and email security.

4. Cloud Security & DevSecOps

Design secure architectures for hybrid and cloud-native environments (Azure, AWS, GCP). Integrate Zero Trust, least privilege, and infrastructure-as-code principles into cloud and DevOps environments. Embed security into the SDLC using automated scanning (SAST, DAST, IAST) and container security practices.

5. Policy, Standards & Control Implementation

Define, implement, and maintain enterprise-wide security policies, controls, and technical standards. Ensure alignment between security governance, vulnerability management, and enterprise architecture.

6. Research & Innovation

Continuously monitor emerging cyber threats, compliance trends, and security innovations to improve security posture and advise strategic direction.

 

Qualifications & Experience

Education:
Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent practical experience). Experience: 8+ years in IT security architecture or engineering, within financial services, banking, or payments is a benefit. Proven expertise in IAM, PAM, cloud and network security, and integration of third-party services. Strong background or familiarity with secure software development and DevSecOps practices. Certifications (Preferred):
CISSP, CISM, TOGAF, ISO/IEC 27001 Lead Implementer/Auditor, ITIL, SABSA, CEH, or equivalent.

 

Skills & Competencies

Deep knowledge of enterprise and cloud security architecture and controls. Solid understanding of regulatory frameworks: ISO/IEC 27001, NIST CSF, PCI DSS, DORA, GDPR, SWIFT CSP. Strong analytical skills and a pragmatic, risk-based approach to security decisions. Excellent communication and stakeholder management in matrixed, international organizations. Proactive, self-motivated, and committed to continuous learning. Fluent in English; German proficiency is highly beneficial.

Thrive at Riverty with great benefits: 

Immerse yourself in a welcoming, trust-filled atmosphere as part of our agile teams and explore the fantastic opportunities within the Bertelsmann Group  Put your health first by engaging in a variety of supported sports and leisure activities – it's important to us!  Empower your growth and professional development with Riverty’s training sessions and customized development plans. Together, we'll learn, evolve, and achieve success  Know that you're appreciated with plenty of employee benefits & discounts just for you  Experience the best of both worlds with our flexible working arrangements, which let you mix on-site teamwork and remote work to create the perfect professional experience that suits your life 

Please note, benefits could be different depending on location or agreement details, and they may alter over time. We'd be delighted to explore these benefits in greater depth during an interview.

About us 
We are Riverty. And we believe everyone should be in control of their financials. We ask you to join in. Because together with you, we build the most human-centric fintech. We build on experience of more than 50 years. More than 5,000 people in 13 countries drive our company and contribution to society. And we have their backs. We make sure they feel supported and included: Across teams, across physical and invisible borders and across the globe. 

Our world is growing. And we’re here. Together, we’re finding smarter, simpler, seamlessly connected ways to manage money. By leveraging data and financial technology, our holistic solutions provide flexible payments, smarter accounting, and fair debt collection, all aimed at fostering everyone's financial growth. 

And. Everything we do, starts with you. Join us and let‘s build a more sustainable financial future, together.

More information on riverty.com/careers. Are you already convinced? Then we look forward to receiving your online application – with just a few clicks.
We look forward to applications from candidates who contribute to the diversity of our company. We relate diversity in particular to the dimensions of cultural or social origin, religion, age, disability, gender and sexual identity.

 Company: Riverty Tech OÜ | Job ID: 282159