Security Technical Program Manager at Flywire

Valencia, Valencian Community, Spain -

Full Time

Start Date

Immediate

Expiry Date

07 Jun, 26

Salary

0.0

Posted On

09 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Technical Program Management, Information Security, Application Security, Cyber Risk, PCI DSS, SOX, SOC2, GDPR, HIPAA, Secure-SDLC, Vulnerability Governance, Cloud Environments, AWS, GCP, Azure, OWASP Top 10

Industry

Software Development

Description

Company Description Are you ready to trade your job for a journey? Become a FlyMate! Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world. What more do we need to truly be unstoppable? Perhaps, that is you! Who we are: Flywire is a global payments enablement and software company, founded a decade ago to solve high-stakes, high-value payments in education, using modern technology. Today, we’ve digitized payments for more than 3,300+ global clients across education, healthcare, travel & B2B, covering more than 240 countries and territories and supporting over 140 currencies. And, we’re just getting started! With over 1000+ global FlyMates, representing more than 40 nationalities, and in 14 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow. Job Description The Opportunity As a Security Technical Program Manager, you will be the connective tissue between our Product and Engineering teams, ensuring security isn't just a checkpoint, but a foundational pillar of our cloud and AI ecosystems. We are looking for a leader who can translate complex threat landscapes into high-impact, actionable roadmaps, balancing rigorous program management with deep technical empathy. You won't just manage tasks; you will architect the execution of our security vision. Key Responsibilities Security Architecture & Design: Lead high-stakes Security Design Reviews, embedding Secure-SDLC principles from the first line of code to global deployment. Vulnerability Governance: Orchestrate the end-to-end threat lifecycle, partnering with SRE, DevOps, and Engineering to turn risk data into rapid, automated remediation. Compliance & Trust: Champion our commitment to PCI DSS, SOX, and SOC2, while navigating the complexities of global regulations like GDPR and HIPAA. Strategic Execution: Define the "Security North Star," establishing clear success metrics (KPIs/KRIs) and reporting progress directly to executive leadership. Velocity & Security: Partner with development teams to integrate best practices that enhance—rather than hinder—development velocity, proving that "secure" and "fast" can coexist. Program Operations: Transform abstract security ideas into structured project charters with clear roles, timelines, and a definitive "Definition of Done." Qualifications What We’re Looking For Experience: 6+ years in Technical Program Management, specifically focused on Information Security, Application Security, or Cyber Risk. Compliance Mastery: A proven track record of managing and delivering audits for PCI, SOC2, and SOX. Technical Depth: You "speak engineer." You have a deep understanding of the OWASP Top 10, Cloud environments (AWS, GCP, or Azure), and modern vulnerability management tools. Execution Excellence: The ability to orchestrate multiple high-stakes projects simultaneously across different time zones and functions without losing momentum. Strategic Communication: Exceptional ability to translate complex technical vulnerabilities or compliance hurdles into concise, actionable plans for non-technical stakeholders. Crisis Leadership: Resilience in high-pressure scenarios, with the judgment to make informed decisions during security incidents or tight launch windows. Influence: A natural ability to motivate and influence cross-functional teams and seniority levels without direct authority. Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related technical field. Desired Certifications & Proficiencies Security & Compliance: CISSP, CISM, or CCSK. Audit Focused: CISA (particularly valuable for our SOX and SOC2 requirements). Program Management: PMP or Agile/Scrum Master certifications. Tooling: Familiarity with GRC platforms (e.g., Vanta, Drata), vulnerability scanners (e.g., Nessus, Snyk), and CSPM tools. Additional Information What We Offer: Competitive compensation Employee Stock Purchase Plan (ESPP) Flying Start - Our immersive Global Induction Program Work with brilliant people that will keep you on your toes, learn more about their journeys by checking out #InsideFlywire on social media Dynamic & Global Team (we have been collaborating virtually for years!) Wellbeing Programs (Mental Health, Wellness) with Global FlyMates Be a meaningful part in our success - every FlyMate makes an impact Competitive time off including FlyBetter Days to volunteer in a cause you believe in Digital Disconnect Days! Great Talent & Development Programs Submit today and get started! We are excited to get to know you! Throughout our process you can expect to meet with different FlyMates including the Hiring Manager, Peers on the team, the VP of the department, and a skills assessment. Your Talent Acquisition Partner will walk you through the steps and be your “go-to” person for any questions. Flywire is an equal opportunity employer. With over 30 nationalities across 12 different offices, and diversity and inclusion at the core of our people agenda, we believe our FlyMates are our greatest asset, and we’re excited to watch our unique culture evolve with each new hire. Flywire is an equal opportunity employer. #LI-Hybrid #LI-Remote

Responsibilities

The role involves acting as the connective tissue between Product and Engineering teams to embed security as a foundation in cloud and AI ecosystems. Key duties include leading Security Design Reviews, orchestrating vulnerability governance, championing compliance standards, and defining the security vision through actionable roadmaps.