Principal Application Security Architect

Our story

Strada is a technology-enabled, people powered company committed to delivering world-class payroll, human capital management, and financial management solutions to organizations globally.

With a team of more than 8,000 experts and over 30 years of expertise, Strada blends leading-edge technology with human ingenuity to help businesses across the globe design and deliver at scale. Supporting over 1,400 customers in 33 countries, Strada partners with customers at every stage of their journey, to help drive their vision forward.

It’s why we’re so driven to connect passion with purpose. Our team’s experience in human insights and cloud technology gives companies and employees around the world the ability to power confident decisions, for life.

With a comprehensive total rewards package, continuing education and training, and tremendous potential with a growing global organization, Strada is the perfect place to put your passion to work.

To learn more about us, visit stradaglobal.com

Product Security Architect

Join Strada Global and Shape the Future of Cybersecurity!
At Strada Global, we are on a mission to revolutionize the way the world thinks about global payroll. As a Product Security Architect, you will play a pivotal role in defining and implementing cutting-edge security strategies that protect our products and drive our business forward. Your expertise will help us navigate the complex landscape of cybersecurity, ensuring that our applications are robust, resilient, and ready to face any challenge.

Why Strada Global?
Innovative Environment: Be part of a forward-thinking team that embraces innovation and creativity.
Impactful Work: Your contributions will directly influence the security and success of our global operations.
Growth Opportunities: We invest in your professional development and offer pathways for career advancement.
Collaborative Culture: Work alongside passionate professionals who are dedicated to making a difference.

Key Responsibilities:
Strategic Vision: Help develop and maintain a comprehensive application security architecture for our products that aligns with our business goals and technology landscape.

Innovative Solutions: Design and implement security solutions that leverage the latest technologies and best practices for application security.
Risk Management: Translate business objectives and risk management strategies into actionable security processes for our products.
Security Standards: Establish and enforce security configuration standards for application development, deployment, and maintenance.
Data Protection: Develop standards for data encryption and tokenization to safeguard sensitive information within our products.
Continuous Improvement: Stay ahead of emerging threats and technologies to ensure our product security posture remains robust and adaptive.

Key Projects:
Cloud Migration: Lead the full migration of our application stack from AWS and legacy data centers to Azure, ensuring a seamless transition and robust security posture for our applications in the new environment.
Security Program Rebuild: Spearhead the rebuilding of our product security program to enhance our defenses and align with industry best practices.
Architecture Program Development: Partner in the implementation of a comprehensive security architecture program that supports our strategic goals and operational needs for product security.
Collaboration and Leadership:
Cross-Functional Collaboration: Work closely with product managers, developers, and other stakeholders to integrate security into all aspects of our product lifecycle.

Vendor Management: Assess and manage the security of third-party vendors and partners involved in product development.
Knowledge Sharing: Liaise with other security professionals to share insights and best practices.
Business Continuity: Collaborate with the business continuity team to ensure security measures are in place during failovers and other critical events affecting our products.

Qualifications:
Educational Background: Bachelor's or master's degree in computer science, information systems, cybersecurity, or a related field, or comparable experience.
Certifications: CISSP, CISA, TOGAF, GAIC, or CISM preferred.
Technical Expertise: Hands-on experience with application security, threat modeling, secure coding practices, and vulnerability management.
Regulatory Knowledge: Familiarity with regulations and frameworks such as HIPAA, GDPR, ISO 27001/2, and NIST CSF.
Business Acumen: Strong strategic planning, communication, financial