Sr Security Architect - Information Security

MoneyGram

47d•$170,000 - $190,000•Hybrid

About The Position

The Security Architect provides technical leadership in shaping MoneyGram’s security architecture and protecting critical assets and operations while enabling business innovation. The role anticipates emerging threats, designs effective security controls, and embeds security into solutions from the start. It requires expertise across cloud, application, infrastructure, identity, and data security, as well as the ability to turn complex security requirements into practical, scalable solutions that balance innovation and risk. The architect develops enterprise security principles, standards, patterns, and reference designs; translates security objectives, regulatory requirements, and risk appetite into architecture requirements; and advises technology, product, business, risk, compliance, and leadership stakeholders. The position works across cloud-native, hybrid, and enterprise platforms, and supports secure cloud adoption, infrastructure as code, containerized workloads, APIs, and integration services. The role also evaluates security technologies and emerging threats, designs sustainable compliance controls, and communicates security decisions to technical and non-technical audiences.

Requirements

Bachelor’s degree in computer science, cybersecurity, or a related field, or an equivalent combination of education and relevant professional experience.
At least seven years of experience in information security, including three or more years in security architecture or another senior-level security role.
At least three years of hands-on experience in cloud security.
Expertise in one or more of the following: enterprise and cloud security architecture; secure-by-design and secure-by-default principles; security standards, architecture patterns, and control frameworks; threat modeling and risk assessment; identity and access management; application and API security; security governance and regulatory compliance; security strategy and technology roadmap development; or emerging technologies and security capabilities.
Strong knowledge of security risks and threats facing large, complex systems and networks, with the judgment to address them effectively.
Experience designing sustainable controls that support regulatory and compliance requirements, including PCI, SOC, and SOX.
Experience with scripting, programming, automation, and AI-enabled security technologies.
Ability to collaborate with engineering, product, IT, risk, compliance, and business teams.
Strong analytical and problem-solving skills, including the ability to navigate ambiguity and resolve complex challenges.
Ability to translate highly technical information into clear, actionable guidance for audiences at every level of the organization.
Excellent relationship-building, communication, presentation, and influencing skills.

Nice To Haves

CISSP certification.
CCSP certification.
AWS Certified Security – Specialty certification.
Microsoft Certified: Azure Security Engineer Associate certification.

Responsibilities

Develop enterprise security principles, standards, patterns, and reference designs that support secure and scalable business and technology outcomes.
Translate security objectives, regulatory requirements, and risk appetite into practical architecture requirements for technology teams.
Partner with product, engineering, infrastructure, and operations teams to embed security into new and existing systems from the start.
Provide architectural leadership across cloud, application, infrastructure, identity, data, and third-party technology environments.
Review solution designs and implementation plans, identify security risks, evaluate tradeoffs, and recommend practical mitigations.
Guide teams in threat modeling, identity and access management, data protection, logging, monitoring, and operational resilience.
Define security architecture for cloud-native, hybrid, and enterprise platforms, including network segmentation, encryption, secrets management, workload protection, and security visibility.
Establish scalable security patterns for cloud adoption, infrastructure as code, containerized workloads, APIs, and integration services.
Evaluate security posture and emerging threats and recommend architecture improvements, compensating controls, or new capabilities to reduce risk without limiting agility.
Assess security technologies, vendor solutions, and automation opportunities for alignment with enterprise architecture, security strategy, and operational needs.
Design sustainable security controls that support regulatory, compliance, and audit expectations while remaining practical for technology and business teams.
Advise technology, product, business, risk, compliance, and leadership stakeholders on security matters.
Communicate security decisions by translating complex risks, requirements, and tradeoffs for technical and non-technical audiences.
Help teams understand and address security requirements early, strengthening a security-first culture and positioning security as an enabler of innovation and responsible growth.