VP Product Security Architecture: Secure-by-Design Leader

Relha LLC; Stamford, Northern (CT, KY); Hybrid; USD 192,000 - 223,000; Full time

Benefits offered by this job

Annual bonus

Hybrid/Remote work options

Office hubs access

Job summary

Synchrony is seeking a VP, Product Security Architect to provide enterprise-level security architecture leadership across its application and SaaS ecosystem. This role sets standards, defines roadmaps, and partners with product and engineering leaders to embed security into strategy and delivery.

You will own the Application Security Blueprint, lead governance, drive threat modeling, and ensure secure-by-design practices.

Qualifications

• 10+ years in security architecture/engineering focused on application security.
• Proven enterprise influence: setting standards, cross-team adoption.
• Deep knowledge of API security and OWASP risks; translate to patterns.
• Experience securing SaaS apps and SSO/federation (SAML/OIDC).
• Certifications such as CISSP/CCSP/CSSLP preferred.

Responsibilities

• Provide enterprise-level product security architecture leadership over Synchrony's ecosystem.
• Define and evolve the Application Security Blueprint and guardrails.
• Lead architecture governance, design reviews, and remediation.
• Drive threat modeling and security requirements for high-risk initiatives.
• Coach engineers and architects in secure design and decision-making.
• Develop security maturity metrics for executive leadership and risk reduction.
• Partner with product/engineering to embed security in SDLC and pave fast delivery.

Skills

Threat modeling

API security

Identity federation

CI/CD security

Vulnerability management

Secrets management

Service mesh

Logging & monitoring

Security architecture

SaaS security

Education

Security certifications preferred

Job description

Synchrony is seeking a VP, Product Security Architect to provide enterprise-level security architecture leadership across its application and SaaS ecosystem. This role sets standards, defines roadmaps, and partners with product and engineering leaders to embed security into strategy and delivery.

You will own the Application Security Blueprint, lead governance, drive threat modeling, and ensure secure-by-design practices.