Product & Cybersecurity Manager; BaaS Hybrid

Position: Product & Cybersecurity Manager (BaaS |  | Hybrid)
About audax
audax means courage. To have the courage to change the banking scene, eliminating constraints caused by existing legacy infrastructure. Our mission is to empower banks and financial institutions to scale and modernise at speed, reaching new customers without breaking the bank.
We began our journey supplying services to and powering Standard Chartered’s white-label plug and play Banking-as-a-Service (BaaS) solution, Standard Chartered nexus, through our technology capabilities. At audax, we seek go-getters who are hungry for growth and can bring fresh perspectives.

Website -   https://(Use the "Apply for this Job" box below)..io

What You’ll Do

We are looking for a seasoned security professional to act as the primary interface between our customers’ security teams and our internal product, engineering, and compliance stakeholders. This role is responsible for understanding customer security and regulatory requirements, mapping them to our product security controls, and confidently articulating, negotiating, and guiding customers toward mutually acceptable security outcomes.

In addition, the role will support internal security and risk initiatives by providing security architecture and risk oversight across project life cycles.

You will serve as a trusted security advisor to clients / stakeholders while ensuring our products meet regulatory, risk, and security expectations in a scalable and consistent manner. Your key responsibilities are:

Client & Stakeholder Engagement
Act as the primary security point of contact when engaging with customer security, risk, and compliance teams.
Build and maintain trusted relationships with bank stakeholders including CISO, Technology Risk, Compliance, Audit, and Operations teams.
Lead security discussions, assessments, and reviews with customers to understand their security, regulatory, and risk requirements.
Clearly articulate our product security architecture, controls, and risk posture to customers.
Manage and resolve differing security views by negotiating practical, risk-based and mutually acceptable solutions.
Support customer due diligence activities including security questionnaires, audits, and regulatory assessments.

Security Standards & Regulatory Alignment
Maintain strong working knowledge of relevant security and regulatory standards including ISO/IEC 27001, CIS, GDPR, MAS TRM, and other applicable frameworks.
Translate and harmonize multiple customer and regulatory standards into a unified, consistent set of product security controls.
Ensure consistent interpretation and implementation of security controls across products and environments.

Product Security & Risk Management
Perform threat modeling and security risk reviews against defined security control frameworks.
Assess product architectures (cloud, containerized, API-based, mobile) for security risks and control effectiveness.
Partner with engineering and product teams to validate control implementation and remediate gaps.
Provide security design guidance aligned with regulatory and customer expectations.

Data Protection & Privacy
Advise on data protection, privacy, and data residency requirements relevant to customer and regulatory needs.
Assess product data flows and controls to ensure alignment with applicable privacy regulations.

Internal Advisory & Enablement
Serve as a subject matter expert to internal teams on customer security expectations and regulatory interpretations.
Support sales, pre-sales, and customer success teams during security-related discussions.
Contribute to security documentation, control mappings, and assurance materials.

Internal Security & Risk Project Support

Support internal security and risk initiatives including architecture reviews, project rollout reviews, and major change assessments.
Review solution designs and project implementations to ensure alignment with approved security architectures and control requirements.
Identify security risks arising from new products, features, or infrastructure changes and recommend appropriate risk treatments.
Provide security sign-off or input as part of internal governance, risk, and change management processes.
Collaborate with internal security, risk, and compliance teams…