Roles specified to the certification.

Build ledger and money-movement services that keep balances and settlements correct — double-entry, reconciliation-ready, and cardholder data in PCI scope only when required.

Translate banking, lending, and wealth workflows into clear product UI — accessible, performant, and session-secure under release control.

Own the Kubernetes and multi-cloud platform payments, risk, and banking services run on — Terraform-automated, change-controlled, and built for engineering self-service.

Build credit and underwriting decision engines — policy rules, bureau and alternative data, and explainable outcomes that survive model review and audit.

Productionize fraud and financial-crime models — feature pipelines, low-latency scores, drift monitoring, and model-risk evidence for review boards.

Build market-data and order-management paths that stay low-latency and deterministic — with real-time risk checks and SOX-grade change control.

Embed security into the fintech SDLC — threat models at design time, SAST/DAST in the pipeline, and secure review before money-moving code ships.

Monitor, triage, and contain threats in the SOC — SIEM detection, incident response, and an evidence trail auditors can follow.

Plan and test IT and security controls — ITGCs, evidence packs, and remediation — so SOC 2, PCI DSS, SOX, and GLBA exams don’t become fire drills.

Serve as named security leadership part-time — program strategy, compliance ownership, and board-ready risk reporting without a full-time CISO hire.

Map every cardholder-data flow and define the CDE — so PCI scope is evidence-backed, reducible, and ready before the QSA arrives.

Own release gates and regression suites for money-moving systems — CI quality checks and SOC 2-ready test evidence before auditors ask.