VP of Secure Product Architecture & Strategy

Synchrony; Cincinnati (OH); Hybrid; USD 155,000 - 260,000; Full time

Benefits offered by this job

Flexible work arrangements

Job summary

Synchrony seeks a VP of Product Security Architecture to provide enterprise-level leadership across its application and SaaS ecosystem. This role defines standards, sets a multi-year roadmap, and partners with product and engineering to embed security into strategy and delivery.

You will own the Application Security Blueprint, drive threat modeling at scale, shape API security patterns, and mentor a team of security architects to foster a security-first culture.

Qualifications

• 10+ years in security architecture/engineering in modern software environments.
• Enterprise-level influence: set standards and align stakeholders.
• Strong knowledge of API security and OWASP.
• Experience leading threat modeling and producing architecture artifacts.
• Certifications such as CISSP/CCSP/CSSLP preferred

Responsibilities

• Provide executive leadership for product security architecture with multi-year roadmap.
• Set direction for portfolios aligning security with strategy and regulatory expectations.
• Own and evolve the Application Security Blueprint and guardrails.
• Partner with product and engineering to embed security in delivery.
• Lead architecture governance: review criteria, remediation, risk acceptance.
• Drive threat modeling at scale, define trust boundaries and data flows.
• Define API security architectures including authentication, token strategy, rate limits.
• Establish security patterns for distributed systems and cloud-native apps.
• Develop KPIs and security maturity metrics for executives.
• Mentor engineers and architects to raise secure design skills.

Skills

Security architecture

Threat modelling

API security

DevSecOps

Regulated environments

Communication

Certifications (preferred)

Travel readiness

Tools

SSO/Federation (SAML/OIDC)

Job description

Synchrony seeks a VP of Product Security Architecture to provide enterprise-level leadership across its application and SaaS ecosystem. This role defines standards, sets a multi-year roadmap, and partners with product and engineering to embed security into strategy and delivery.

You will own the Application Security Blueprint, drive threat modeling at scale, shape API security patterns, and mentor a team of security architects to foster a security-first culture.