Head of Security & DevSecOps (Fintech)

Nodi; Ciudad de México; Presencial; MXN 1.800.000 - 3.200.000; Jornada completa

Descripción de la vacante

Tonder is building payments infrastructure for Latin America, and security is a core part of the product. We’re looking for a Head of Security to own and continuously strengthen Tonder’s security program across infrastructure, engineering, compliance, and operations.

This is a hands-on leadership role. You’ll define the security roadmap, work directly with Engineering and leadership, and make sure security controls are not only documented, but actually implemented, automated, monitored, and

Formación

• Leadership in security for fintech/payments or highly regulated environments.
• Strong technical judgment with execution in cloud security and DevSecOps.
• Experience with PCI DSS and incident response processes.

Responsabilidades

• Define security roadmap and strategy for infrastructure, engineering, compliance, and operations.
• Lead cloud, application, and infrastructure security, IAM and secrets management.
• Build security into the engineering lifecycle with DevSecOps and automated controls.
• Manage vulnerability management from detection to remediation and validation.
• Lead security incident response, investigation, containment, and post-incident improvements.
• Ensure PCI DSS and other security/compliance programs are maintained and improved.
• Review architecture with engineering to identify risks and enforce secure-by-design controls.
• Develop automated AI-assisted security workflows for monitoring and remediation.
• Oversee third-party security reviews and vendor assessments.

Conocimientos

Security leadership

Cloud security

DevSecOps

PCI DSS

Incident response

Herramientas

AWS

CI/CD

IAM

Descripción del empleo

Tonder is building payments infrastructure for Latin America, and security is a core part of the product. We’re looking for a Head of Security to own and continuously strengthen Tonder’s security program across infrastructure, engineering, compliance, and operations.

This is a hands-on leadership role. You’ll define the security roadmap, work directly with Engineering and leadership, and make sure security controls are not only documented, but actually implemented, automated, monitored, and