---
title: 'Security Architect at capital.com'
canonical: 'https://feeny.ai/job/security-architect-capital-com-warsaw-yfk897303arg'
type: 'job'
last_seen: '2026-09-10'
---

# Security Architect at capital.com

- **Company:** capital.com
- **Location:** Warsaw, Poland
- **Work type:** hybrid
- **Posted:** 2026-09-01
- **Last confirmed live:** 2026-09-10
- **Apply:** https://jobs.lever.co/capital/119d01b5-0a3c-4109-8ea0-9b231f60d718

## Job description

Capital.com is a global fintech company with over 1,000,000 clients worldwide. Our platform offers CFD trading across 5,000+ markets, powered by proprietary AI technology that helps traders make better decisions. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team.

As part of our continued investment in security and regulatory resilience, we are seeking a Security Architect to own the design of our enterprise security governance, risk, and compliance (GRC) framework. This is a senior, high-visibility role that sits at the intersection of security architecture, multi-jurisdiction regulatory compliance, and organizational risk — shaping how a global fintech company regulated across five jurisdictions thinks about, measures, and reduces security risk.

Responsibilities:

- Own the enterprise security GRC framework — policy hierarchy, risk register methodology, control ownership, and audit evidence structure.
- Map controls to DORA, NIS2, ISO 27001, and PCI-DSS, identify gaps, and set remediation priority.
- Act as the final authority on regulatory interpretation affecting security, including written positions for audits and regulatory submissions.
- Own the compliance and obligation management framework across all five regulated jurisdictions (FCA, CySEC, ASIC, SCB, SCA), including regulatory horizon scanning.
- Represent the company in regulatory discussions alongside the CISO and General Counsel where required.
- Define the company's human-risk philosophy and shape the security awareness architecture — segmentation, interventions, and measurement.
- Advise the CISO, CHRO, Risk, and Compliance teams on security risk, regulatory obligations, and investment trade-offs.
- Set the architectural standards the Corporate Security team executes against, and sign off on significant framework changes.
- Support Third-Party Risk Management and Business Continuity & Crisis Management from a security and technical perspective.

Requirements:

- 8+ years in security with a significant focus on GRC, regulatory compliance, riskmanagement, or a combination — with a track record of owning these programs at enterpriselevel, not just familiarity with them.
- Proven experience designing enterprise-level security architectures or frameworks;experience in a regulated financial services environment (brokerage, payments, banking, orequivalent) is preferred but not required.
- Deep command of ISO 27001 and PCI-DSS (working knowledge of DORA and NIS2preferred), with the ability to translate regulatory text into specific controls, identify gaps, anddetermine what is mandatory versus discretionary.
- Multi-jurisdiction compliance experience; direct exposure to FCA or CySEC is a strongadvantage.
- Demonstrated ability to advise and influence C-suite stakeholders on complex security andregulatory matters.
- A structured, analytical thinking style — able to hold multiple regulatory regimessimultaneously without losing precision on any of them.
- Fluent English, written and spoken.

Nice to have:

- Direct experience managing regulatory submissions or engaging with supervisory authorities(FCA, CySEC, ASIC, SCB, or SCA).
- TPRM program design experience, including DORA ICT third-party risk requirements andsupply chain risk.
- Business Continuity Management background, with experience meeting operational resilienceobligations and presenting at Board level.
- Security awareness program design with measurable behaviour-change outcomes.
- Experience building or scaling a Corporate Security function from an early stage.
- Relevant professional certifications (CISSP, CISM, CRISC, or equivalent).

What you will get in return:

- Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated.
- Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid
- Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry.
- Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team.
- Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks!
- Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits!
- Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community.

Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

## About capital.com

## Company Overview
- **One-liner**: Capital.com is a multi-award-winning, tech-driven online trading platform that empowers retail traders worldwide with CFDs, advanced tools, and educational resources.
- **Entity Type**: Private (Series A, $25M funding from VP Capital in 2017)
- **Headquarters**: Limassol, Cyprus (with offices in London, Dubai, Warsaw, Sofia, Melbourne)
- **Founded**: 2016
- **Founders**: Viktor Prokopenya

## Core Business
- **Primary industry/industries**: Financial Services (Online Brokerage, CFD Trading, Fintech)
- **Target customers**: B2C (retail traders, from beginners to experienced)
- **Mission or purpose statement**: To help traders make better decisions by giving them the tools and resources they need to trade with confidence.

## Products & Services
- **[Capital.com Platform]**: Web and mobile trading platform offering 5,500+ markets across multiple asset classes (forex, indices, shares, commodities, crypto). Features real-time data, advanced charting, and a responsive mobile app. (SaaS, mobile-first)
- **[Investmate App]**: Educational app for new and amateur traders, covering finance basics, risk management, and trading skills. (Service / Education)
- **[eQ (AI-Powered Trading Bias Detection)]**: A system that tracks trading behaviour, detects cognitive biases, and provides personalised educational materials and news. (AI tool)
- **[SmartFeed]**: A feed that delivers personalised financial news and educational content based on user behaviour. (AI-powered content engine)

## Market Standing
- **Valuation/Market Cap**: Not disclosed
- **Key Metric**: Total client trading volume exceeded $1.2 trillion in 2023; over 880,000 traders; 1,000+ employees globally as of 2025.
- **Notable Investors/Partners**: VP Capital (lead investor); regulated by FCA (UK), CySEC (Cyprus), ASIC (Australia), SCA (UAE) and in other jurisdictions.
- **Growth Signals**: 34% year-over-year headcount growth (adding ~326 people); named "Fastest-Growing Company in the Middle East and Cyprus" for three consecutive years; expanded into UAE with a new regional head office; trading volumes grew 90% YoY in 2022; awarded "best in class" in five categories by ForexBrokers.com in 2024.

## Competitive Advantages
- **AI-first approach**: Proprietary behavioural analytics (eQ, SmartFeed) that help traders improve decision-making – a key differentiator from traditional brokers.
- **Global regulatory footprint**: Licensed in five major jurisdictions, providing trust and access to clients in 180+ countries.
- **Mobile-first from inception**: Launched as the first mobile-first broker in Europe, leading to a seamless cross-device experience.
- **Strong brand recognition**: Multi-award-winning with high ratings on Glassdoor (4.5) and among clients.

## Strategic Focus
- Continue expanding into new markets (e.g., UAE, Asia-Pacific).
- Deepen AI and machine learning capabilities to enhance personalisation and trading insights.
- Scale the educational ecosystem (Investmate, SmartFeed) to attract and retain retail traders.
- Grow headcount across engineering, product, and operations teams while maintaining a strong culture.

## Why Work Here
- **Culture**: Values-driven (ownership, curiosity, momentum) with a collaborative, international environment. Described as blending "the ambition of a scale-up with the collaboration of a close-knit team."
- **Work Model**: Hybrid working (where applicable); option to work abroad up to 30 days per year ("Workation Initiative").
- **Perks**: Private health insurance, performance-based bonuses, volunteering days, referral bonuses, social events, development and training support.
- **Engineering & Innovation**: Opportunity to work on a next-generation trading platform using AI, data, and scalable infrastructure. Teams are located across multiple continents, offering cross-cultural collaboration.
- **Reviews**: Glassdoor score 4.5; LinkedIn employer rating 4.3/5.0 (246 reviews) with high marks for Work-Life (4.4), Compensation (4.6), Culture (4.3), and Career (4.4).

## Sources
1. [careers.capital.com](https://careers.capital.com/)
2. [capital.com/en-gb/about-us/careers](https://capital.com/en-gb/about-us/careers)
3. [jobs.lever.co/capital](https://jobs.lever.co/capital)
4. [linkedin.com/company/capital.com](https://linkedin.com/company/capital.com)
5. [capital.com/en-int/about-us/our-history](https://capital.com/en-int/about-us/our-history)

## Other roles at capital.com

- [Marketing Manager (Gibraltar)](https://feeny.ai/job/marketing-manager-gibraltar-capital-com-gibraltar-nzp8nnh7p0hf) — Gibraltar
- [Senior Partnerships Manager](https://feeny.ai/job/senior-partnerships-manager-capital-com-dubai-6xdf448ywm2r) — Dubai, United Arab Emirates
- [IT Service Desk Engineer L1](https://feeny.ai/job/it-service-desk-engineer-l1-capital-com-warsaw-hy2wwjm7f3rv) — Warsaw, Poland
- [Senior Product Operations Manager – LLM Automation](https://feeny.ai/job/senior-product-operations-manager-llm-automation-capital-com-sofia-city-nt6jvk98nm04) — Sofia City, Bulgaria
- [New Business Specialist (Client Activation & Onboarding)](https://feeny.ai/job/new-business-specialist-client-activation-onboarding-capital-com-city-of-76d24bm50rkg) — City of Johannesburg, Gauteng
- [Junior Trader](https://feeny.ai/job/junior-trader-capital-com-limassol-tgmagg82fczr) — Limassol, Cyprus
- [Head of Dealing](https://feeny.ai/job/head-of-dealing-capital-com-nassau-59vg14gm4n3s) — Nassau, New Providence
- [Country Manager, Brazil](https://feeny.ai/job/country-manager-brazil-capital-com-sao-paulo-z87vtdj4ybm5) — São Paulo, Brazil
- [Senior Zendesk Automation Specialist](https://feeny.ai/job/senior-zendesk-automation-specialist-capital-com-sofia-city-dm0z3a7qwzqx) — Sofia City, Bulgaria
- [Compliance Operations Officer](https://feeny.ai/job/compliance-operations-officer-capital-com-melbourne-r1y59gyzzanh) — Melbourne, Australia