Head of Information Security

Job Title: Head of Information and Application Security

Location: Remote / Hybrid

Employment Type:Full-time

Experience:5+ years in information security, cybersecurity, risk, or security engineering

Job Summary

We are hiring a Head of Information Security to define and lead Afriex’s security strategy, controls, incident readiness, and security culture. This role will protect customer trust, systems, and data while enabling secure product growth.

Key Responsibilities

- Develop and own the company’s information security strategy and roadmap.

- Lead security governance, risk management, and control implementation.

- Oversee cloud security, endpoint security, access control, monitoring, and incident response.

- Partner with engineering on secure SDLC, vulnerability management, and remediation.

- Lead third-party risk assessments and security reviews.

- Maintain policies, standards, awareness training, and security reporting.

- Support audits, certifications, and compliance programs as needed.

- Reviewing application architecture and design for security risks.

- Performing secure code reviews and working closely with developers.

- Identifying common application vulnerabilities (e.g., OWASP Top 10).

- Integrating security into the SDLC through testing, tooling, and best practices.

- Helping establish secure development standards and advising on remediation of security findings.

Requirements

- 5+ years in information security or cybersecurity roles.

- Strong knowledge of security architecture, IAM, threat detection, incident response, and risk management.

- Experience working with cloud environments and engineering teams.

- Strong communication skills and ability to translate security into business language.

- Experience designing practical security programs in high-growth environments.

Preferred

- CISSP, CISM, or similar.

- Fintech, payments, or regulated-industry experience.