Information Security Lead

You'll own security at Mama Money end to end. Your main focus is our APIs and the third-party calls our products depend on: payout partners, banks, card and KYC providers. Endpoints come second, but they matter too.

This is a lead role, not a management layer. You'll set the standards and make the calls, and you'll also do the work: threat modelling, reviewing code and integrations, running incidents. Endpoint security is managed day to day by our outsourced provider. You'll work with them directly, but the accountability for security sits with you. A big part of the role is explaining risk clearly to engineers, leadership and regulators, so clear writing matters as much as technical depth.

• 6+ years in information security, with at least 3 in application, API or cloud security.
• Hands-on API security: OAuth 2.0 and OIDC, JWT, mTLS, request signing, and the OWASP API Security Top 10.
• Practical AWS security: IAM, KMS, CloudTrail, GuardDuty, Security Hub, WAF.
• Experience threat modelling systems and reviewing code for security issues.
• Experience scoping penetration tests and driving remediation.
• Experience leading incident response, from detection to post-mortem.
• Experience managing an outsourced security provider against clear standards.
• Scripting in Python or Bash, enough to automate checks and pull evidence.
• One or more of: CISSP or CISM; OSCP, OSWE or GWAPT; AWS Certified Security, Specialty.
• After-hours: you'll be the escalation point for security incidents.

• Experience in a regulated environment, ideally payments or banking; FSCA, SARB or FIC exposure is a plus.
• PCI DSS experience.
• ISO 27001 implementation or audit experience.
• SIEM and detection engineering.
• Kubernetes and container security.
• Terraform or other infrastructure-as-code.

Why Mama?

We build products that help people do more with their money — from sending money home, to saving, to accessing money in ways that feel safe and simple. The work matters because it helps real people in real ways, every single day.

We're not afraid to give things a go, and we take ownership of what we do. We keep learning, support each other, and stay focused on what matters most. If you're after meaningful work and a team that genuinely cares about what they're building — this could be your next move.

Mama's values