Security Technical Program Manager

Company Description

Are you ready to trade your job for a journey? Become a FlyMate!

Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world.

What more do we need to truly be unstoppable? Perhaps, that is you!

Who we are:
Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments in higher education. We’ve since scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients around the world.

Today we support more than 5,300 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies.

With over 1,400 global FlyMates, representing more than 40 nationalities, and in 15 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow.

Job Description

The Opportunity:

As the Security Technical Program Manager, you will serve as the strategic operational bridge connecting the Security Risk Engineering function with global Product, Engineering, and SRE teams. You will orchestrate mission-critical security programs from inception to deployment, transforming abstract security, compliance, and risk initiatives into high-impact, actionable roadmaps. This role requires a balance of rigorous technical program management, financial services acumen, and modern technical insight across cloud architectures and AI ecosystems to ensure Flywire moves fast and remains secure by design.

Responsibilities and Tasks (in order of priority)

• Security Lifecycle Program Management: Lead and drive cross-functional "Security by Design" and Secure-SDLC initiatives across critical application launches, automated workflows, and emerging AI tools from ideation to deployment.
• AI-Driven Process Efficiency: Actively adopt and leverage internal enterprise AI tools and Large Language Models (LLMs) to automate program tracking, streamline documentation, optimize cross-functional security workflows, and continuously drive operational efficiency.
• Vulnerability & Threat Orchestration: Coordinate the end-to-end vulnerability lifecycle, partnering directly with Product, SRE, and Software Engineering to ensure rapid prioritization, tracking, and remediation of technical risks.
• Information Security Compliance & Regulatory Audits: Oversee complex technical security assessments and audits to ensure continuous, strict readiness for PCI-DSS, SOX, SOC 1, and SOC 2 frameworks.
• Strategic Roadmap & Operational Governance: Establish, maintain, and communicate the security engineering program roadmap, defining clear project charters, timelines, success metrics, and the technical "Definition of Done" for executive stakeholders.
• Cross-Functional Enablement: Partner with high-velocity software engineering and infrastructure teams to integrate secure technical guardrails seamlessly without inducing development velocity friction.
• Team Performance & Mentorship: Provide guidance and operational coaching to junior members of the security and program teams, cultivating a culture of technical excellence and collaborative risk awareness.

Qualifications

Here's What We're Looking For:

Education, Experience/Knowledge & License/Certification

• Education: Bachelor's or Master's degree required in Cybersecurity, Information Technology, Computer Science, or a related technical field.
• Core Experience: 2+ years of progressive experience in Technical Program Management (TPM), driving complex Information Security, Application Security, or Cyber Risk initiatives within highly scalable technology environments.
• Industry & Domain Requirement: Extensive experience operating within the Financial Services and global Payments Industry space is required. Must possess a deep structural understanding of high-stakes financial platform mechanics, transaction processing lifecycles, and payment clearing rails.
• Information Security Compliance & Audit Mastery: Proven track record of managing, executing, and delivering complex end-to-end audits for strict financial and core data privacy frameworks, with mandatory proficiency in PCI-DSS (v4.0), SOX, SOC 1, and SOC 2. Thorough working knowledge of emerging international standards (e.g., DORA) is highly preferred.
• Technical & AI Depth: Solid foundational understanding of modern cloud architectures (AWS/GCP/Azure), automated Secure-SDLC engineering pipelines, the OWASP Top 10 for LLMs, and automated enterprise vulnerability management systems- all in the spirit of protecting Flywire global payment ecosystem from bleeding-edge threats.

Highly Preferred Certifications

• Core Security & Compliance: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CCSK (Certificate of Cloud Security Knowledge).
• Audit Focused: CISA (Certified Information Systems Auditor).
• Program Execution: PMP (Project Management Professional) or certified Agile/Scrum Master.

Skills and Abilities

• Fintech/Financial Services Security Compliance Specialist: Exceptional ability to translate dense, high-stakes financial compliance requirements and complex technical vulnerabilities into frictionless, highly scannable, and actionable engineering remediation plans.
• Automation & Optimization Mindset: Demonstrated ability to look at legacy program management frameworks and replace manual, repetitive checkpoints with intelligent automation, workflows, and enterprise AI tools.
• Influence Without Authority: Natural leadership presence with a demonstrated ability to align, motivate, and drive cross-functional software engineers, product managers, and external financial regulators across globally distributed time zones.
• High-Pressure Decision Making: Impeccable resilience and analytical clarity in high-pressure scenarios, with the ability to manage transparency and guide risk-based decisions during active security incidents or compressed financial product launch windows.
• Strategic & Tactical Balancer with a Commercial Mindset: Highly hands-on and technically skilled. Strong strategic thinker with the ability to contribute to and translate team/program’s high-level vision into actionable plans and drive successful execution. Balances technical risk reduction with business enablement, ensuring security infrastructure serves as a competitive advantage that unblocks global revenue and enterprise-client acquisition.

Additional Information

Submit today and get started!

We are excited to get to know you! Throughout our process you can expect to meet different FlyMates including the Hiring Manager and other Flymates. Your Talent Acquisition Partner will walk you through the steps and be your “go-to” person for questions.

Flywire is an equal opportunity employer and follows a policy of administering all employment decisions and personnel actions without regard to race, color, religion, sex, pregnancy, gender identity, national origin, age, ancestry, physical or mental disability, sexual orientation, genetic disposition or carrier status, veteran status, or any other category protected under applicable national, federal, state or local law.

The US base salary range for this full-time position is $97,000-120,000 plus benefits. Our salary ranges are determined by role, position level, and location. The range displayed on this job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and several other factors, including job-related skills, experience, relevant education and training.

#LI-Hybrid