Lead, Information Security Strategy and Risk

Fispan Co; Vancouver; On-site; CAD 100,000 - 120,000; Full time

Benefits offered by this job

Equity grants

Semi-annual bonus

Work-From-Anywhere policy

Extended health and dental benefits

Paid time off

Job summary

FISPAN Services Inc. is hiring a Lead, Information Security Strategy and Risk to ensure security decisions and changes are reviewed with rigor across product, engineering, infra, and operations.

You will partner with Engineering, Infrastructure, Product, GRC & Legal to assess controls, review decisions, and drive durable security improvements, including vulnerability management and testing programs.

Qualifications

• 7+ years in security architecture, cloud security, application security, assurance or technical risk roles.
• Experience reviewing SaaS or cloud-native architectures and decisions.
• Strong understanding of IAM, cloud infra, network security, logging and vulnerability management.
• Experience leading vulnerability management and penetration testing programs.
• Ability to translate risk into actionable remediation and executive summaries.
• Excellent written communication and cross-functional collaboration.

Responsibilities

• Lead security and risk reviews for technology, infrastructure, integration, product and operations.
• Define security principles, guardrails, and risk controls across cloud and production environments.
• Provide security-by-design guidance for new systems, internet-facing services, and sensitive data integrations.
• Oversee vulnerability management strategy, severity definitions, remediation expectations, and escalation.
• Translate technical risks into business impact and prioritize remediation with leadership.

Skills

Security architecture

Cloud security

Application security

Security assurance

Technical risk

Written communication

Cross-functional collaboration

Tools

AWS

Kubernetes/EKS

Cloud networking

Production change patterns

Job description

Our Business

FISPAN Services Inc. (FISPAN) is an Enterprise SaaS FinTech company that allows banks to deploy embedded financial products and services to create a seamless banking connection for their corporate clients. Our product aims to provide instant scale and reach for banks who want to remove friction and add value by enabling their commercial banking clients to access banking services through their preferred ERP / accounting platform.

Founded in 2016 and headquartered in downtown Vancouver, FISPAN is on a mission to create the best product in the FinTech industry and fundamentally change the way that companies bank. Being the market leader in ERP Banking, we work with the world’s Tier 1 banks with assets exceeding $3T, including J.P. Morgan Chase, Wells Fargo, TD and Bank of Montreal.

We are looking for dynamic and passionate individuals to join our high performance team and contribute to our rapid growth and exciting journey.

Role Summary

FISPAN is hiring a Lead, Information Security Strategy and Risk to help ensure security decisions, control designs, and technical changes are reviewed early and implemented with the right level of rigor. This role focuses on practical security architecture, design assurance, and risk reduction across product, engineering, infrastructure, and operational change.

You will partner closely with Engineering, Infrastructure, Product, GRC & Legal to review material technical decisions, assess security controls, and help teams move quickly without introducing avoidable risk. You will also lead key parts of FISPAN’s vulnerability management and penetration testing program, translating technical findings into clear remediation priorities and durable security improvements.

Key Responsibilities:

Security Design & Risk Review

• Lead security and risk reviews for material technology, infrastructure, integration, product, and operational changes.
• Define security principles, control expectations, and risk guardrails across cloud, SaaS, data flows, identity, privileged access, and production environments.
• Provide security-by-design guidance for new systems, internet-facing services, AI capabilities, shared platforms, and sensitive data integrations.
• Support risk assessments, threat modeling, control reviews, and documented security decisions for significant initiatives.

Vulnerability Management & Security Testing

• Own the vulnerability management strategy and governance process across applications, infrastructure, cloud services, and shared platforms.
• Define risk-based severity, prioritization, remediation expectations, escalation, and exception handling.
• Identify recurring vulnerability patterns and drive lasting control improvements and measurable risk reduction.
• Provide oversight of high-severity vulnerabilities, external exposure, and emerging threats.

Security Strategy, Risk & Oversight

• Develop and maintain security strategy and priorities aligned with business objectives, regulatory obligations, and bank partner expectations.
• Identify material and emerging risks, recurring control weaknesses, and areas requiring broader security investment.
• Translate technical risks into clear business impact, priorities, and recommendations for leadership.
• Contribute to security governance, risk reporting, roadmap planning, and oversight of material exceptions and risk acceptances.
• Partner with Product, Engineering, Compliance, Legal, and Operations to embed security and risk considerations into key decisions.

Requirements/Qualifications

• 7+ years in security architecture, cloud security, application security, security assurance, or technical risk roles with strong technical collaboration.
• Demonstrated experience reviewing architecture and implementation decisions in SaaS or cloud-native environments.
• Strong understanding of security controls across IAM, cloud infrastructure, network security, logging/monitoring, vulnerability management, and production access.
• Experience leading or materially contributing to vulnerability management and penetration testing programs.
• Ability to assess material risk, identify control gaps, and drive practical remediation.
• Strong written communication skills, including the ability to produce clear security recommendations, design feedback, and executive-facing summaries.
• Strong collaboration and teamwork skills with the ability to work effectively across Engineering, Infrastructure, Product, Legal/GRC, and Security.

Nice to Have

• Experience in FinTech, banking, embedded finance, or regulated SaaS environments.
• Familiarity with AWS, Kubernetes/EKS, cloud networking, and production change patterns.
• Experience reviewing shared infrastructure patterns, workflow automation platforms, and operational tooling.
• Familiarity with privacy and regulatory expectations relevant to SaaS platforms serving financial institutions.

Why Work With Us?

Visionary Team, Proven Results

Our leadership bench brings deep, collective experience in scaling high-growth FinTech companies through major funding cycles and critical market inflection points. This expertise creates a stable foundation, allowing you to focus on building and innovating. You will benefit directly from mentorship, expand your professional network, and learn the strategic decision-making processes required to lead a global, mature technology company.

Accelerated Career Ownership & DEI Commitment

We are an emerging high-growth company, and that means your career trajectory here is accelerated. Our employees are immediately given a high level of ownership and autonomy over complex, impactful projects.

As FISPAN continues to grow, we are committed to celebrating diversity, endorsing equity, and encouraging inclusion. We strive to eliminate bias throughout our recruitment process and build a culture where everyone feels they belong and can contribute their best work.

Strategic Total Rewards & Wellbeing

We invest in your success. Our total compensation packages are designed to be highly competitive, including a semi-annual bonus plan and equity grants that give you a true stake in our future. Beyond your compensation, you benefit from:

• Best-in-Class Equipment: The most modern MacBook and Apple equipment.
• Prime Location: Our downtown Vancouver office offers coastal views and access to the building fitness center.
• Flexibility: Generous benefits, including a family leave top-up program and our Work-From-Anywhere policy.

Purpose-Driven Culture & Prime Perks

Our culture is the foundation of our success. We operate with a "we over me" mentality, fostering strong, collaborative bonds built on Trust and Candor. You will also enjoy: fully stocked cupboards, weekly catered team lunches, and daily JJ Bean coffee runs to keep your energy high and your wallet happy.

Compensation Package

FISPAN believes in an atmosphere and culture when innovation can flourish, collaboration and teamwork are valued and transparency is at the core of it all. We want our employees to see how the ideas they help generate today have an impact on how we do business tomorrow.With that, the hiring salary range for this position is $100,000-$120,000 annually; the base pay offered is based on comparable market data from companies of similar employee size, revenue and location. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive semi-annual bonus program, subject to program eligibility requirements.

At FISPAN, we reward employees for achieving their objectives, going beyond the requirements of their job, demonstrating leadership, fostering innovation and advancing the organization as a whole. We value talented people of all backgrounds and characteristics that share our vision of being the number one platform for the business banking ecosystem.

Other components of our rewards offerings include support of career development, wellbeing, and personal growth.

• Extended health and dental benefits
• Paid time off
• Savings and retirement plan matching
• Parenthood top-up
• Mentorship programs, and leadership series (to name a few)

Note: The incentive programs, benefits, and perks have certain eligibility requirements and may vary, only be partially or not at all available based on criteria such as location, employment status, etc. We’ll be happy to clarify eligibility for interviewing candidates.