IT Security Manager

About Pay By Phone

At Pay By Phone , our strength is our people. Behind our product is a talented, creative, and driven multi-disciplinary team united by a shared ambition: to make everyday mobility simpler. We believe innovation should be collaborative, learning should be constant, and work should be enjoyable. As we grow, we’re looking for people who want to grow with us. Together, we’re on an ambitious mission to create intuitive technology solutions that deliver world-class user experiences.

We are a fast-growing, forward-thinking company and already help more than 60 million users across North America and Europe. Our technology helps millions of consumers pay quickly, easily, and securely — without waiting in line, carrying change, or worrying about costly fines.

Location:

Vancouver (Hybrid)

Employment type:

Full-time, Permanent

Reports To:

Chief Information Security Officer

The IT Security Manager will manage and mature a pragmatic security program that protects payment data, customer information, internal systems, and business operations across AWS and corporate platforms, with PCI DSS as the primary compliance priority and SOC 2 as a supporting assurance objective.

• Manages the security management framework, policies, standards, control evidence, and operating rhythms needed to sustain a PCI DSS-first program while maintaining supporting SOC 2 obligations.
• Lead security operations across cloud and corporate platforms, including AWS security services, Entra , Microsoft 365, MDR solution oversight, logging and monitoring, vulnerability management, and access governance.
• Drive investigation and response for security events, control failures, suspicious activity, and potential data exposure scenarios; coordinate containment, remediation, communications, and lessons learned.
• Partner with Engineering, Product, Cloud Platform, and IT to strengthen secure design, application security, change control, segmentation, encryption, hardening, and remediation of security findings.
• Manage security risk management and third‑party security oversight by translating control requirements, technical findings, and business risk into prioritized actions and measurable follow‑through.
• Lead the team of Security Analysts while influencing cross‑functional stakeholders through strong critical thinking, sound judgment, and a persuasive approach to change.

• 5+ years of progressive experience in information security, security compliance, cloud security, or security engineering, including hands‑on ownership of controls and remediation programs.
• Bachelor’s degree in computer science, Information Security, Information Systems, or equivalent practical experience.
• Experience with PCI DSS and payment‑security control environments; experience with SOC 2, ISO 27001, or related frameworks is helpful.
• Working knowledge of AWS and modern SaaS security, including IAM, Entra , Microsoft 365, logging, monitoring, segmentation, encryption, vulnerability management, and workload security.
• Experience with people management and growing team capabilities.
• Experience with security operations fundamentals such as SIEM or log management, MDR or managed detection oversight, alert triage, incident response coordination, vulnerability scanning, penetration test remediation, and access reviews.
• Experience partnering with software engineering teams on secure SDLC, application security, and change management in fast‑moving delivery environments.
• Ability to write clear policies, standards, procedures, risk summaries, executive updates, and audit evidence with a high level of precision and follow‑through.
• Able to move comfortably between strategic planning, control design, hands‑on validation, and day‑to‑day operational follow‑up.
• Confident communicator with technical accuracy or practical focus who is comfortable working with executives, auditors, engineers, and business teams.
• Organized and detail‑oriented, with strong critical thinking, sound prioritization, and good judgment in risk‑based decision making.
• Persuasive and practical in driving change cross‑functionally.
• Comfortable reading technical documentation,…