About the Role
The Security Architecture function defines, governs, and evolves security architecture practices at Tyro. This role partners with engineering, architecture, product, and business stakeholders to embed security into technology solutions by design, enabling business objectives and innovation. The Security Architect provides technical leadership across AI, cloud, applications, infrastructure, data, and emerging technologies, developing standards, conducting reviews, performing threat modeling, and offering strategic guidance.
Responsibilities
- Develop and maintain a deep understanding of Tyro's Payments, Banking and Health products, technology platforms and business objectives.
- Define and maintain security architecture principles, reference architectures, standards, reusable patterns and security guardrails.
- Conduct AI-focused security architecture reviews and threat modelling for new and existing AI use cases, assessing risks such as data leakage, prompt injection, model misuse, insecure integrations, excessive agency and inappropriate access to sensitive data.
- Provide security architecture leadership and guidance across strategic initiatives, projects and business-as-usual technology activities.
- Partner with Enterprise Architecture, Solution Architecture, Engineering and Product teams to embed security-by-design principles throughout the technology delivery lifecycle.
- Conduct security architecture reviews, threat modelling exercises and design assessments for new and existing solutions.
- Define security requirements and security controls for cloud, application, infrastructure, data and third-party solutions.
- Assess emerging technologies and provide guidance on the secure adoption of cloud-native services, AI-enabled solutions and modern engineering practices.
- Review and assess third-party technologies, vendors and strategic technology partnerships from a security architecture perspective.
Requirements
- Extensive cyber security experience in security architecture, solution architecture or security engineering.
- Demonstrated understanding of AI and machine learning security risks, including LLM application security, prompt injection, model governance, data protection, identity and access controls, monitoring and secure integration patterns.
- Familiarity with emerging AI security frameworks and guidance, such as OWASP Top 10 for LLM Applications, NIST AI RMF, ISO/IEC 42001 or equivalent industry practices.
- Strong understanding of cloud, infrastructure, application, identity and data security.
- Demonstrated experience designing and securing AWS and/or Azure environments.
- Experience conducting threat modelling and security design reviews.
- Strong understanding of secure software development and DevSecOps.
- Knowledge of CPS234, ISO27001, CIS Controls and PCI DSS.
- CISSP, CCSP, SABSA, TOGAF or equivalent certification.
Skills
- AI security
- Machine learning security
- LLM application security
- Prompt injection
- Model governance
- Data protection
- Identity and access controls
- Monitoring
- Secure integration patterns
- Cloud security
- Infrastructure security
- Application security
- Identity security
- Data security
- AWS security
- Azure security
- Threat modelling
- Security design reviews
- Secure software development
- DevSecOps
- CPS234
- ISO27001
- CIS Controls
- PCI DSS
- Container security
- Kubernetes security
- Zero Trust Architecture
- Privacy
- AI
- Data security
Location
- Remote
- In-office
Work Type
- Hybrid
Experience Level
- Extensive cyber security experience
Education Level
- CISSP
- CCSP
- SABSA
- TOGAF
- AWS Security Specialty
- Azure Security certification
Benefits
- Learning and career development opportunities
- 18 weeks paid primary carers leave
- 12 weeks paid secondary carers leave
- Annual team-based volunteer day
- Birthday Leave
- Power Up Day
- Weekly team social events, snacks, craft beer and wine, ping pong and video games
- Taco Tuesdays
- Mental health and wellness initiatives
- Novated leasing
About the Company
- Tyro provides integrated payments, banking, and lending solutions to ensure Australian business success.
- With over 21 years of experience, Tyro combines people, technology, and partners to deliver simplified payments and seamless business banking.
- Tyro powers over 76,000 merchants and works with almost 800 partners across hospitality, retail, services, and health sectors.
- Tyro is committed to fostering a collaborative, fast-paced, and innovative environment where employees can grow their careers and make an impact.
- Tyro's mission is to make payments the easiest part of doing business.
Equal Opportunity
- Tyro is committed to a diverse, inclusive workplace where everyone thrives.
- Tyro welcomes applicants of all backgrounds and is an equal opportunity employer.
- Tyro provides accommodations or adjustments for individuals with disabilities during the recruitment process.
