Pontera is a fintech company on a mission to help people retire better. Our software platform enables retirement savers to get the help they need managing their 401(k) and other retirement plan accounts as part of a personalized strategy by their trusted financial advisor.
Pontera is used by financial advisors across the nation from SMB to Fortune 500 RIA firms, independent broker-dealers, plan custodians, and plan advisors.
Backed by leading venture capital firms including ICONIQ Growth and Lightspeed Venture Partners, Pontera is built by talented individuals who share a dedication to helping people retire with greater security.
Our team is fast-growing and driven to become one of the largest fintech companies in the world. Our culture is built on a people-first principle: in a complex and numbers-driven industry, we never lose sight of the people we serve and work alongside. Thats where you come in.
About the Role
Pontera is looking for an experienced Principal Security Architect to lead security architecture, enterprise security, AI security, and risk management across our infrastructure, cloud, SaaS, enterprise, and AI environments.
Reporting to the CISO, you will play a key leadership role in shaping Ponteras security strategy, defining security requirements, influencing technology decisions, and enabling the secure adoption of emerging technologies. This is a senior technical leadership role with broad influence across the companys security architecture and technology strategy.
Working closely with Engineering, Product, Infrastructure, IT, Legal, HR, and business teams, you will help build secure-by-design solutions that support innovation and business growth. As part of Ponteras technical Security organization, you will collaborate closely with fellow security specialists across AppSec, DevSecOps, SecOps, and Incident Response to drive consistent, risk-informed security outcomes.
Responsibilities
Security Architecture & Risk Management
- Lead security architecture reviews, threat modeling, and risk assessments across infrastructure, cloud platforms, SaaS applications, enterprise systems, AI initiatives, and strategic business projects.
- Define security requirements, architectural guardrails, and secure-by-design principles for new technologies, platforms, and business initiatives.
- Serve as a trusted security advisor, translating technical risks into practical security decisions and business recommendations.
AI Security & Emerging Technologies
- Lead Ponteras AI Security strategy and governance, enabling the secure adoption of AI across Engineering, Product, Data, and business teams.
- Define security architecture principles and risk management approaches for GenAI, LLMs, AI agents, AI-enabled products, and emerging AI technologies.
- Leverage AI and automation to strengthen security capabilities, improve risk management, and scale security programs.
Enterprise Security & Governance
- Own Ponteras security governance and compliance operating model, including GRC resources, compliance automation, audit readiness, continuous control monitoring, and security policies.
- Lead security reviews of vendors, SaaS platforms, enterprise technologies, and strategic technology partnerships.
- Present security risks, recommendations, and architectural decisions to technical and business leadership.
Security Leadership
- Lead cross-functional security initiatives and strategic security programs.
- Mentor team members and help grow Ponteras Security organization.
Qualifications
- 10+ years of experience in Information Security, Security Architecture, Security Engineering, Cloud Security, or related disciplines.
- Proven technical leadership experience, with the ability to lead cross-functional initiatives, influence architectural decisions, and drive security strategy across the organization.
- Strong hands-on experience securing AI, cloud, infrastructure, SaaS, and enterprise environments.
- Experience leading security architecture reviews, threat modeling, and risk assessments.
- Strong understanding of enterprise security, identity and access management, network security, data protection, modern cloud security, and secure software architecture.
- Strong interest in AI Security and experience securing or enabling the adoption of AI technologies, including GenAI, LLMs, AI agents, AI governance, or AI-enabled platforms.
- Working knowledge of security frameworks such as ISO 27001, SOC 2, NIST CSF, or similar.
- Excellent communication skills and the ability to influence both technical and executive stakeholders.
- Passion for emerging technologies, AI innovation, and building secure solutions at scale.
