Manager, Vulnerability & Data Security

As Marqeta’s Information Security Manager you will lead Vulnerability Management and establish a Data Security program. You’ll drive risk reduction across cloud, endpoints, and applications, while building controls and monitoring to safeguard critical data end-to-end across all of Marqeta’s systems and services—100% cloud-based, with no data center footprint.

We work Flexible First . This role can be performed remotely anywhere within the United States. We’d love for you to join us!

The Impact You'll Have: 

Vulnerability Management

• Lead program strategy and operations: asset coverage, scanning cadence, prioritization, and measurable risk reduction using Tenable (Nessus/SC/IO) and Snyk.
• Integrate Tenable and Snyk findings into engineering backlogs with clear SLAs; partner with SRE, platform, and application teams to drive remediation.
• Establish risk-based prioritization (CVSS, KEV, EPSS, exploitability, business criticality) and publish dashboards for transparency to leadership.
• Mature patching and configuration baselines; build preventative controls and secure-by-default guardrails.
• Coordinate vulnerability disclosure, pen test intake, and threat-driven campaigns for actively exploited CVEs.
• Report program health, trends, and exceptions to security leadership and auditors.

Data Security (Program Build & Ownership)

• Establish clear data ownership and stewardship across critical datasets; define roles, responsibilities, and decision rights.
• Define and enforce data classification, access, and usage policies; drive best practices and guard rails for least privilege and segregation of duties.
• Operationalize Sentra (DSPM) and Google DLP to monitor data exposure and access risks; drive timely remediation with accountable teams.
• Build data lifecycle controls (creation, storage, use, sharing, archival, destruction) and technical guardrails embedded in platforms and workflows.
• Ensure compliance with data protection regulations (e.g., PCI, SOX); partner on control design, testing, and evidence collection.
• Collaborate with Security, Legal, Privacy, and Data teams to protect data across its lifecycle and enable safe analytics/product use cases.
• Develop metrics (DLP incidents, misconfigurations, toxic combinations, stale sensitive datasets, policy violations) and report to leadership.

Who You Are:

• 7–10+ years in information security with 3+ years leading programs or teams; regulated/fintech experience preferred.
• Hands-on depth managing vulnerabilities at scale with Tenable and Snyk across cloud-native, containers, endpoints, and CI/CD.
• Practical experience building/maturing data security programs with Sentra (DSPM) and Google DLP; strong policy design and enforcement.
• Partner management across engineering, data, and compliance; able to translate risk into actionable plans and measurable outcomes.
• Familiarity with PCI and SOX; knowledge of SDLC, DevSecOps, and cloud security architectures (AWS/GCP/Azure).
• Comfort with IAM/IGA, SIEM, CNAPP, and ticketing/workflow integrations; solid grasp of data governance concepts (stewardship, lineage).
• Excellent communication and reporting—clear narratives, crisp metrics, executive-ready updates.
• Certifications such as CISSP or CISM are a plus.

How you’ll measure success

• Reduction in high-risk vulnerabilities and time-to-remediation across prioritized asset classes.
• Complete inventory coverage and adherence to patch/configuration SLAs via Tenable/Snyk dashboards.
• Implemented and adopted data classification and access policies with defined ownership.
• Sentra and Google DLP coverage with declining exposure trends and timely remediation.
• Successful PCI/SOX audits for relevant controls; fewer exceptions and faster closure.
• Clear metrics and dashboards used by leadership for decision-making.

Nice to Have's: 

• Experience automating Tenable/Snyk workflows into CI/CD and GRC/Risk registers.
• Background in data governance (stewardship councils, RACI) and analytics platform security (e.g., Snowflake, Databricks, BigQuery).
• Exposure to SaaS Security Posture Management and third-party data controls at scale.

Manager:

• Chetan Jha

Recruiter For This Role:

• Kayla Osuna

Compensation and Benefits: 

Marqeta is a Flex First company which allows you to choose your best working environment, whether that be from home or at a company office. To support Flex First, we calibrate pay to a competitive value according to working location. Compensation is aligned according to three tiers within the United States:

• National : A baseline tier that applies to most of the geographic territory of the United States.
• Premium : Slightly elevated from the National tier, and oriented toward a narrower set of higher cost-of-living areas, such as Los Angeles CA and Seattle WA
• Premium Plus : A tier for the most expensive working areas, like the San Francisco Bay area and New York City.

Visit this page or consult with a Recruiter to determine which tier would be applicable to you.

When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this position is:

• National: $167,100 - $208,900
• Premium: $179,800 - $224,700
• Premium Plus: $$195,400 - $244,400

We also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.

Along with monetary compensation, Marqeta offers

• Multiple health insurance options
• Flexible time off – take what you need
• Retirement savings program with company contribution and after tax contributions
• Equity in a publicly-traded company and an Employee Stock Purchase Program
• Family-forming benefits, fertility support, and up to 20 weeks of Parental Leave
• Free therapy sessions, financial and professional coaching, and legal advice
• Monthly stipend to support our remote work model
• Annual “development dollars” to support our people growth and development
• Through Flex First, the freedom to live and work wherever you and your family thrive

About Marqeta

Marqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage payment operations in real time. Marqeta is powering the most well known brands in the new economy (Block, Cash App, Affirm, Instacart, Doordash, Uber, Walmart, etc). You don’t need to be a Payments expert to join the Marqeta Team, let us help you with that. This is the opportunity of a lifetime to work with innovators around the world and unlock equitable financial access for all.

Marqeta’s Values

– Solve for the Customer: With a deep understanding of our customers' business and empathy for their needs, we deliver products and services that drive their success. Earning and keeping their trust guides everything we do.

– Do What's Right: Knowing businesses and livelihoods depend on us, we pursue solutions that disrupt responsibly and deliver high-quality results that our customers count on. We own our work from start to finish.

– Simplify and Innovate: We approach challenges with curiosity and take smart risks. Innovation comes from finding better, simpler ways to achieve extraordinary outcomes.

– Win as a Team: We succeed together by embracing diverse perspectives and pushing each other to raise the bar. We lead with humility and set aside hierarchy to work as a team.

– Make it Count: We drive forward with focus and agility. With a sense of urgency and purpose, we get the job done, and done right.

Equal Employment Opportunity, Accommodations and Privacy 

Marqeta is an equal opportunity employer committed to an inclusive workplace that fosters belonging. We do not discriminate based on race, color, religion, sex (including pregnancy, lactation, childbirth, or related medical conditions), veteran status or uniformed service member status, age, national origin or ancestry, citizenship or immigration status, physical or mental disability, gender identity, gender expression, sexual orientation, genetic information (including testing or characteristics) or any other characteristic protected by applicable law. We also consider qualified applicants with criminal histories, consistent with legal requirements. 

Marqeta endeavors to make reasonable accommodations for applicants with disabilities. If you are an individual with a disability and require a reasonable accommodation to submit this application, complete any pre-employment testing, or otherwise participate in the employee selection process, please submit this form with your specific accommodation request.

Personal data that is provided as part of the application and recruitment process is processed in accordance with the Applicant Privacy Notice . Additional information for California residents can be found here .