Security Program Manager

About VoPay International Inc.

VoPay’s Fintech-as-a-Service platform enables any business to embed financial services and payment capabilities into their existing applications, products, or services through a single, scalable API. Our integrated technology gives product managers and developers the flexibility and speed to build innovative financial solutions in a rapidly evolving industry.

Opportunity

We are seeking a technically capable and collaborative Security Program Manager to help build, operate, and continuously improve VoPay's information security program.

This is a hands-on role that combines security operations, cloud and infrastructure security, compliance, risk management, and security tooling. While you'll play an important role in supporting SOC 2, PCI DSS, and other regulatory initiatives, this is not a purely audit or governance-focused position.

You'll work closely with Engineering, Infrastructure, IT, Compliance, Risk, and Operations teams to ensure security controls are implemented effectively, monitored continuously, and evolve alongside our platform.

The ideal candidate enjoys solving technical problems, improving security processes, and working across teams to reduce risk while enabling the business to move quickly. This is an opportunity to take ownership of key security technologies and help shape the future of security at VoPay.

Key ResponsibilitiesSecurity Program & Compliance

• Help ensure VoPay's security policies, standards, and technical controls meet SOC 2, PCI DSS, customer, and regulatory requirements.
• Own the day-to-day administration of Drata, ensuring security controls remain healthy, monitored, and audit-ready throughout the year.
• Coordinate evidence collection and support external audits, customer security assessments, and compliance initiatives.
• Identify control gaps and work with Engineering, IT, and business teams to implement practical, scalable improvements.
• Track security risks, remediation activities, and overall security program maturity.
• Assist in developing and maintaining security policies, standards, procedures, and security awareness initiatives.

Security Operations & Monitoring

• Own VoPay's Datadog SIEM, including log ingestion, detection rules, dashboards, alert tuning, and operational reporting.
• Coordinate with VoPay's Managed Security Service Provider (MSSP) to review, triage, investigate, and respond to security alerts.
• Assist with incident response activities, investigations, root cause analysis, and post-incident improvements.
• Continuously improve security monitoring capabilities while reducing false positives and alert fatigue.
• Develop and maintain security playbooks, alerting standards, and operational response procedures.
• Monitor security trends, emerging threats, and vulnerabilities that may impact VoPay's environment.

Infrastructure & Technical Security

• Partner with Engineering, Infrastructure, and IT teams to strengthen the security of VoPay's AWS infrastructure, applications, APIs, and internal systems.
• Work with the IT Manager to establish and maintain endpoint hardening standards, secure configuration baselines, and device management practices.
• Help implement, monitor, and improve Data Loss Prevention (DLP) policies and technologies.
• Support vulnerability management, security reviews, penetration testing activities, and remediation planning.
• Review identity and access management controls, privileged access, encryption practices, logging, and monitoring.
• Evaluate and recommend new security tools and technologies that improve VoPay's overall security posture.

Risk Management & Continuous Improvement

• Identify, assess, and prioritize security risks across VoPay's systems, infrastructure, vendors, and business processes.
• Drive remediation initiatives in collaboration with Engineering, IT, and business stakeholders.
• Partner with Compliance, Risk, and Underwriting teams to identify activity associated with bad actors, fraud, account compromise, and other suspicious behaviour.
• Support investigations by correlating security, authentication, application, and transaction data.
• Help bridge traditional cybersecurity monitoring with fraud and operational risk detection
• Champion a pragmatic security culture that enables innovation while protecting VoPay, its customers, and their data.

Experience & Qualifications

• 5+ years of experience in information security, cloud security, security operations, or a related technical security role.
• Strong understanding of cloud security, preferably within AWS.
• Experience working with SIEM platforms such as Datadog, Splunk, Microsoft Sentinel, or similar.
• Experience implementing or maintaining security controls for SOC 2, PCI DSS, or comparable security frameworks.
• Familiarity with endpoint security, system hardening, vulnerability management, identity and access management, and DLP technologies.
• Familiarity with application security concepts, REST APIs, authentication, encryption, and secure software development practices.
• Excellent communication skills with the ability to collaborate effectively across technical and non-technical teams.
• Self-motivated, organized, and comfortable managing multiple priorities in a fast-paced, high-growth environment.

Why Join VoPay?

At VoPay, security is a core part of our platform, not an afterthought. You'll have the opportunity to take ownership of meaningful security initiatives, influence technical decisions, and work alongside experienced engineering, infrastructure, compliance, and product teams to build a security program that scales with our business.

If you're looking for a role where you can make a measurable impact, solve interesting technical challenges, and help shape the future of security at a growing fintech, we'd love to hear from you.

VoPay International Inc. is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Pay: QAR13,603.35 - QAR34,320.35 per month

Work Location: In person