Our Business

FISPAN Services Inc. (FISPAN) is an Enterprise SaaS FinTech company that allows banks to deploy embedded financial products and services to create a seamless banking connection for their corporate clients. Our product aims to provide instant scale and reach for banks who want to remove friction and add value by enabling their commercial banking clients to access banking services through their preferred ERP / accounting platform.

Founded in 2016 and headquartered in downtown Vancouver, FISPAN is on a mission to create the best product in the FinTech industry and fundamentally change the way that companies bank. Being the market leader in ERP Banking, we work with the world’s Tier 1 banks with assets exceeding $3T, including J.P. Morgan Chase, Wells Fargo, TD and Bank of Montreal.

We are looking for dynamic and passionate individuals to join our high performance team and contribute to our rapid growth and exciting journey.

Role Summary

FISPAN is hiring a Lead, Information Security Strategy and Risk to help ensure security decisions, control designs, and technical changes are reviewed early and implemented with the right level of rigor. This role focuses on practical security architecture, design assurance, and risk reduction across product, engineering, infrastructure, and operational change.

You will partner closely with Engineering, Infrastructure, Product, GRC & Legal to review material technical decisions, assess security controls, and help teams move quickly without introducing avoidable risk. You will also lead key parts of FISPAN’s vulnerability management and penetration testing program, translating technical findings into clear remediation priorities and durable security improvements.





Key Responsibilities:

Security Design & Risk Review

- Lead security and risk reviews for material technology, infrastructure, integration, product, and operational changes.
- Define security principles, control expectations, and risk guardrails across cloud, SaaS, data flows, identity, privileged access, and production environments.
- Provide security-by-design guidance for new systems, internet-facing services, AI capabilities, shared platforms, and sensitive data integrations.
- Support risk assessments, threat modeling, control reviews, and documented security decisions for significant initiatives.

Vulnerability Management & Security Testing

- Own the vulnerability management strategy and governance process across applications, infrastructure, cloud services, and shared platforms.
- Define risk-based severity, prioritization, remediation expectations, escalation, and exception handling.
- Identify recurring vulnerability patterns and drive lasting control improvements and measurable risk reduction.
- Provide oversight of high-severity vulnerabilities, external exposure, and emerging threats.

Security Strategy, Risk & Oversight

- Develop and maintain security strategy and priorities aligned with business objectives, regulatory obligations, and bank partner expectations.




- Identify material and emerging risks, recurring control weaknesses, and areas requiring broader security investment.
- Translate technical risks into explicit business impact, priorities, and recommendations for leadership.
- Contribute to security governance, risk reporting, roadmap planning, and oversight of material exceptions and risk acceptances.
- Partner with Product, Engineering, Compliance, Legal, and Operations to embed security and risk considerations into key decisions.

Requirements/Qualifications

- 7+ years in security architecture, cloud security, application security, security assurance, or technical risk roles with strong technical collaboration.
- Demonstrated experience reviewing architecture and implementation decisions in SaaS or cloud-native environments.
- Strong understanding of security controls across IAM, cloud infrastructure, network security, logging/monitoring, vulnerability management, and production access.
- Experience leading or materially contributing to vulnerability management and penetration testing programs.
- Ability to assess material risk, identify control gaps, and drive practical remediation.
- Strong written communication skills, including the ability to produce clear security recommendations, design feedback, and executive-facing summaries.
- Strong collaboration and teamwork skills with the ability to work effectively across Engineering, Infrastructure, Product, Legal/GRC, and Security.

Nice to Have

- Experience in FinTech, banking, embedded finance, or regulated SaaS environments.
- Familiarity with AWS, Kubernetes/EKS, cloud networking, and production ch

📌 Lead, Information Security Strategy and Risk (Vancouver)
🏢 FISPAN Services
📍 Vancouver