Enterprise & Cloud Security Manager

We are inviting you, a highly motivated and results-oriented Enterprise & Cloud Security Manager to join our team on a full-time basis.

Our team has unique expertise in research, analysis, and product development. By relying on technical insights and a data-driven approach, we create disruptive future-defining innovations of the fin-tech industry that remain our basis for success. 

Responsibilities

• Own and lead Enterprise & Cloud Security across cloud, network, identity, endpoint, and data domains
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
• Lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
• Manage cloud IAM and security-group guardrails in close collaboration with Platform and SRE teams
• Operate and mature endpoint security (EDR/XDR/MDM) across managed devices, including hardening and telemetry health
• Own data security and cryptography controls: KMS, secrets management, PKI, and certificate lifecycle
• Lead, mentor, and develop a team of security engineers (4 direct reports - Cloud & Network, Endpoint, IAM, Data Security & Cryptography)
• Track, analyze, and report enterprise security metrics

Requirements

• 5+ years of experience in managing and developing security teams 
• Proven track record in hands-on cybersecurity engineering roles
• Enterprise-level background
• Practical experience with on-premises environments
• Solid experience with networking
• Hands-on experience with cloud platforms
• Broad experience across cloud posture, network, identity, endpoint, and data protection security domains
• Experience with CSPM/CNAPP/CWPP tooling and cloud guardrails (WAF, DNS security, IaC scanning)
• Experience with cloud IAM and security-group/IaC security patterns
• Experience operating EDR/XDR and MDM solutions
• Experience with KMS, secrets management, PKI, and certificate management
• Ability to enforce security controls without unnecessarily blocking delivery for Platform/SRE/DevOps teams
• Upper-Intermediate English and higher
• Fluent Ukrainian

Will be a plus

• Higher education in Computer Science, Information Security
• Background in fintech, brokerage, trading platforms, payments, or other regulated environments
• Track record of building or maturing an enterprise/cloud security function from an early stage
• Familiarity with tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk
• Knowledge of Kubernetes/container security and cloud-native architectures
• Exposure to SOC 2, ISO 27001, or DORA compliance frameworks

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company’s approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)

Role mission

The mission of the Enterprise & Cloud Security Manager is to own and mature enterprise, cloud, identity, endpoint and data security so foundational controls scale safely with the business.

This position leads the Enterprise & Cloud Security function — cloud posture, network/identity guardrails, endpoint protection, and data/cryptography controls — while enabling Platform, SRE, DevOps, and IT teams to move fast within secure guardrails.

Requirements hard skills

1. Strong experience in enterprise/cloud/infrastructure security spanning cloud posture, network, identity, endpoint, and data protection.
2. Hands-on experience with CSPM/CNAPP/CWPP tooling and cloud guardrails (WAF, DNS security, IaC scanning).
3. Practical experience with cloud IAM and security-group/IaC security patterns.
4. Experience operating EDR/XDR and MDM, including hardening and telemetry health management.
5. Experience with KMS, secrets management, PKI, and certificate lifecycle.
6. Experience designing/operating IAM/PAM architecture: IdP, PAM, IGA, MFA, conditional access.
7. Ability to enforce guardrails without unnecessarily blocking Platform/SRE/DevOps delivery.
8. Understanding of SOC 2, ISO 27001, or DORA is a plus.

Requirements soft skills

1. Strong ownership building security capability across multiple technical domains.
2. Clear communication with Platform, SRE, DevOps, IT, and Security leadership.
3. Ability to prioritize based on risk, exposure, and business impact across a broad tech surface.
4. Structured documentation discipline for standards, exceptions, and ownership.
5. Low-ego, collaborative style influencing infrastructure teams without relying only on formal authority.
6. Comfortable operating in a fast-evolving environment with partially mature processes.

Responsibilities

1. Own and lead Enterprise & Cloud Security across cloud, network, identity, endpoint, and data domains.
2. Define and enforce enterprise security guardrails; approve low/medium-risk platform exceptions.
3. Lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments.
4. Manage cloud IAM/security-group guardrails with Platform and SRE teams.
5. Operate and mature endpoint security (EDR/XDR/MDM) across managed devices.
6. Own data security/cryptography controls: KMS, secrets management, PKI, certificates.
7. Design and operate IAM/PAM architecture (IdP, PAM, IGA, MFA/conditional access).
8. Lead and develop the four direct reports; report enterprise security metrics to the CISO/CSO.

Will be a plus

1. Experience in fintech, brokerage, trading platforms, payments, or other regulated environments.
2. Experience building/maturing an enterprise or cloud security function from an early stage.
3. Experience with tools such as Wiz, Panorama, Elastic Defender, Entra, CyberArk.
4. Experience with Kubernetes/container security and cloud-native architectures.
5. Experience with SOC 2, ISO 27001 or DORA compliance.
6. People management experience leading security engineers or leads.