Flywire
Director of Security Risk Engineering
Boston, MA, United States · Director · Full-time
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- As the Director of Security Risk Engineering, you will serve as a key senior leader working in direct partnership with the CISO to drive, shape, and mature Flywire's global enterprise security infrastructure and systems.
- In this role, you will bridge the gap between high-level security strategy and tactical engineering execution across six core domains: Application Security, AI Security, Cloud Security, Corporate Security, Security Operations (SecOps), and Red Teaming (Penetration Testing).
- In partnership with the internal stakeholder organizations, you will lead the organizational shift from technical recovery to global enterprise operational resilience, managing a highly impactful program that safeguards our global payment rails while fostering a culture of collaboration, innovation, and continuous improvement.
Responsibilities
- Strategic Domain Leadership: Define, implement, and monitor a comprehensive security engineering strategy across Application Security, AI Security, Cloud Security, Corporate Security, Security Operations (SecOps/Incident Detection & Response), and Red Teaming (Penetration Testing), aligning initiatives with global business objectives and emerging financial threats.
- Team Management & Mentorship: Support the CISO to lead and manage the global security engineering organization, including hiring, training, mentoring, performance management, and budget oversight.
- Secure Architecture & Governance: Oversee the design and continuous improvement of secure architecture for systems, cloud infrastructure, networks, and applications, ensuring strict alignment with security best practices.
- Global Cross-Functional Collaboration: Partner with Business, Development, DevOps, Product, Program, Risk/Compliance, and IT leaders to seamlessly integrate security controls into all phases of the engineering and CI/CD lifecycle.
- Advanced Cyber Risk Efficacy: Leverage AI and automated tooling to develop proactive measures, threat intelligence capabilities, and scalable defenses against vulnerabilities across all engineering domains.
- Regulatory Compliance Frameworks: Maintain an information security framework that ensures continuous readiness for strict industry audits and regulatory compliance requirements globally (e.g., NIST CSF 2.0, ISO 27001, PCI-DSS 4.0, DORA).
- Executive & Stakeholder Reporting: Define and maintain metrics that communicate security posture, program progress, and incident risk analysis to the CISO, senior executive leadership, and the Board.
- Your Talent Acquisition Partner will walk you through the steps and be your "go-to" person for any questions.
- At Flywire, we're on a mission to deliver the world's most important and complex payments.
Requirements
- 12+ years of progressive experience in information security, IT risk management, or cyber defense roles.
- A solid working knowledge of all aspects of cloud-native infrastructure, software applications, AI/LLM model development, governance & validation, and automated risk mitigation is required.
- Core Experience: 12+ years of progressive experience in information security, IT risk management, or cyber defense roles.
Nice to have
- Secure Architecture & Governance:
- Global Cross-Functional Collaboration:
- Engage actively with external stakeholders, auditors and global regulators on related fronts.
- Advanced Cyber Risk Efficacy:
- Adversarial / Penetration Testing:
- Personally adopt an attacker's mindset to identify complex attack chains, logic flaws, and zero-day vulnerabilities within financial platforms and product architectures.
- Incident Response & Operational Resilience:
- Direct and coordinate responses to critical enterprise security incidents, managing containment, forensic investigation, and rapid remediation efforts alongside SecOps.
Compensation
- $200k-$210k
Benefits
- Employee Stock Purchase Plan (ESPP)
- Competitive time off, including Digital Disconnect and FlyBetter Days to volunteer in a cause you believe in.
- Wellbeing Programs (Mental Health, Wellness, Yoga/Pilates/HIIT Classes) with Global FlyMates
- The US base salary range for this full-time position is $200,000 - 210,000 and benefits.
- Within the range, individual pay is determined by work location and several other factors, including job-related skills, experience, relevant education and training.
Company info
- Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments in higher education.
- We've since scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients around the world.
- Today we support more than 5,100 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies.
- With over 1,200 global FlyMates, representing more than 40 nationalities, and in 12 offices world-wide, we're looking for FlyMates to join the next stage of our journey as we continue to grow.
- The Opportunity:
- Here's What We're Looking For:
- We are excited to get to know you!
This listing is sourced directly from Flywire's careers page and normalized into a canonical job model.