---
title: 'Senior Information Security Engineer at Aspora'
canonical: 'https://feeny.ai/job/senior-information-security-engineer-aspora-bengaluru-8x16bc8wae78'
type: 'job'
last_seen: '2026-09-11'
---

# Senior Information Security Engineer at Aspora

- **Company:** Aspora
- **Location:** Bengaluru, India
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-07-13
- **Last confirmed live:** 2026-09-11
- **Apply:** https://jobs.ashbyhq.com/aspora/fd691e47-77d8-4938-af25-79f8b7be2f7f

## Job description

## About Aspora

People on the move deserve a bank that moves with them. Since 2022, Aspora has been building a borderless financial operating system that makes money as mobile and transparent as its users. Backed by influential venture capitalists like Sequoia Capital, Greylock Partners, Hummingbird Ventures, Y Combinator & Global Founders Capital. We're a team of 150+ across India, the UK, the UAE, EU and the US, working with extreme ownership, radical candour, and an obsession with customer impact. We celebrate builders who question assumptions, ship fast, and turn regulatory complexity into elegant solutions. If you’re driven to redefine what global banking can be, we’d love to build the future with you.

## About the Role

We're seeking a hands-on Senior Information Security Architect to design and implement security controls for our regulated digital banking platform. This is a builder role requiring deep technical expertise in cloud security, data protection, and regulatory compliance. You'll architect defensible, auditable, and scalable security systems that balance protection with product velocity.

Core Responsibilities Technical Architecture (60%)

- Design and implement zero-trust security architectures with clear boundaries, assuming breach scenarios and eliminating implicit trust
- Build data protection systems including field-level encryption for PCI/PII data, cryptographic key management, and envelope encryption patterns
- Architect hybrid cloud security for AWS-to-datacenter connectivity and vendor integrations with one-way trust models
- Implement identity-first access controls with service-to-service authentication, zero standing production access, and time-bound sessions
- Design SIEM and detection systems with logging strategies for legal evidence and correlation across identity, network, and application layers
- Security Harden and maintain next-gen firewalls (Palo Alto, Fortinet) and their integration into our workloads, setup security observability

Operational Security (25%)

- Own end-to-end vulnerability management including asset discovery, risk assessment, remediation, and crisis response (Log4j-style zero-day scenarios)
- Lead incident response and disaster recovery including DR drills, incident command, regulatory notifications, and post-incident validation
- Establish strategic monitoring with prioritized log collection, alert management, and security telemetry
- Partner with Application and Infrastructure teams to understand their SecOps requirements and support the implementation of security solutions
- Identify security gaps and drive initiatives aligned with business goals to strengthen overall security posture

Leadership & Strategy (15%)

- Balance security and product velocity through compensating controls, pragmatic risk acceptance, and documented tradeoff decisions
- Demonstrate scaling awareness by identifying architectural breaking points before they fail and designing for 10× organizational growth

Required Experience

- 7+ years in production AWS security for regulated or financial services environments
- Proven PCI-DSS or financial regulatory compliance implementation experience
- Hands-on incident response and DR drill leadership with real production scenarios
- Startup or high-growth environment experience where you've built security programs from the ground up
- Deep expertise in encryption architecture, key management systems, and cryptographic controls

Required Certifications

- ISO 27001 Lead Implementer or Lead Auditor
- PCI-DSS (QSA, ISA, or P2PE certification)
- Additional certifications valued: CISSP, CCSP, AWS Security Specialty, CISM

## #LI-AR

## About Aspora

## Company Overview
- **One-liner**: Aspora is building a borderless financial operating system for Non-Resident Indians (NRIs), enabling cross-border money transfers, savings, bill payments, and investments.
- **Entity Type**: Private
- **Headquarters**: London, United Kingdom
- **Founded**: 2022
- **Founders**: Parth Garg (CEO)

## Core Business
- **Primary industry/industries**: Financial Services, Cross-Border Payments, Fintech
- **Target customers**: B2C (Non-Resident Indians / Global Indians living in the US, UK, UAE, and EU)
- **Mission or purpose statement**: "Building borderless finance for NRIs" — helping global Indians manage money seamlessly while staying connected to the people and places they love.

## Products & Services
- **Cross-Border Money Transfers**: Send money to India at "Google Rates" (live mid-market exchange rates) with zero hidden fees. 256-bit encryption and 24/7 support.
- **Global Savings Accounts**: Save in global currencies with up to 9% interest.
- **Automated EMIs & SIPs**: Automated recurring payments for loans and systematic investment plans.
- **Bill Payments**: Stay on top of bills in India from abroad.
- **Business Banking (in development)**: A "Founding GTM Specialist (Business Banking)" role is open, indicating an upcoming B2B offering.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed.
- **Key Metric**: Over $2 billion securely transferred worldwide; over ₹150 crore saved by users in forex fees.
- **Notable Investors/Partners**: Not publicly disclosed on the website or LinkedIn. Funds are held with regulated financial institutions.
- **Growth Signals**:
    - **User base**: Trusted by 1 million+ NRIs.
    - **Headcount**: 200 employees (LinkedIn estimate), with a monthly growth rate of +7.0%.
    - **Geographic expansion**: Active in 6 countries (US, UK, UAE, India, and others) with 4 more countries coming this year. Secured a Financial Services license from the Dubai Financial Services Authority (DFSA) in February 2026.
    - **Active hiring**: 17 active job postings (LinkedIn), with monthly job posting growth of +13.3% and quarterly growth of +88.9%.

## Competitive Advantages
- **Pricing Transparency**: Guarantees "Google Rates" (live mid-market exchange rates) with zero hidden fees — a strong differentiator against traditional banks and many fintech competitors.
- **Security-First Approach**: 256-bit encryption, proactive fraud detection, funds held with regulated financial institutions.
- **Niche Focus**: Deeply specialized in the NRI segment, offering a full financial OS (send, pay, invest) rather than just a single transfer service.
- **Scale & Trust**: $2B+ transferred and 1M+ users provides a strong network effect and credibility.

## Strategic Focus
- **Geographic Expansion**: Actively expanding into new countries (4 more planned this year) and securing regulatory licenses (e.g., DFSA in Dubai).
- **Product Expansion**: Moving beyond transfers into savings (up to 9% interest), investments, and business banking.
- **Talent Acquisition**: Aggressively hiring across engineering, product, compliance, and growth roles to support scaling.

## Why Work Here
- **High-Growth Environment**: The company is in a rapid growth phase (200 employees, 7% monthly headcount growth, expanding to new countries). This offers significant career acceleration and ownership opportunities.
- **Mission-Driven**: Work on a product that directly helps the global Indian diaspora — a large, underserved, and emotionally resonant market.
- **Modern Tech Stack**: Uses a sophisticated stack including Python, Java, Spring Boot, Google Cloud Platform, Snowflake, Databricks, Apache Spark, Flink, Airflow, Terraform, dbt, and Looker. Strong emphasis on data engineering and platform engineering.
- **Work Policy**: Hybrid/In-Office model. London HQ, with offices in Bangalore (Bengaluru) and Dubai. BuiltIn indicates a mix of in-office and remote roles.
- **Culture**: Described as building "for the dreamers, the doers, the ones who see the world as their canvas." Focus on transparency, security, and customer obsession.
- **Active Open Roles (as of mid-2026)**: Staff Engineer, Engineering Manager, Senior Software Engineer (Backend), Senior Data Platform Engineer, Senior Product Analytics, Head of Growth, Treasury Operations Lead, Group Chief Compliance Officer, Personal Banking Manager, and more.

## Sources
1. [aspora.com](https://www.aspora.com/)
2. [aspora.com/about-us](https://www.aspora.com/about-us)
3. [LinkedIn](https://uk.linkedin.com/company/get-aspora)
4. [Built In](https://builtin.com/company/aspora)
5. [Jobs.ashbyhq.com](https://jobs.ashbyhq.com/Aspora)

## Other roles at Aspora

- [Customer Support Associate](https://feeny.ai/job/customer-support-associate-aspora-bengaluru-qxkb98snc7wb) — Bengaluru, India
- [Senior Product Designer](https://feeny.ai/job/senior-product-designer-aspora-bengaluru-t1rewjqzw25e) — Bengaluru, India
- [FX Trader](https://feeny.ai/job/fx-trader-aspora-bengaluru-qenjbbf08509) — Bengaluru, India
- [Customer Support Associate](https://feeny.ai/job/customer-support-associate-aspora-bengaluru-sbddbpn51tbk) — Bengaluru, India
- [Senior Product Marketing Manager](https://feeny.ai/job/senior-product-marketing-manager-aspora-bengaluru-3n8cfs1qq291) — Bengaluru, India
- [Treasury Operations Lead](https://feeny.ai/job/treasury-operations-lead-aspora-bengaluru-jj62v1vpe7d6) — Bengaluru, India
- [Head of Product Design](https://feeny.ai/job/head-of-product-design-aspora-london-gt9v0ydf6kcw) — London, United Kingdom
- [Chief Compliance Officer (EMI)](https://feeny.ai/job/chief-compliance-officer-emi-aspora-vilnius-qgrma0mtvad1) — Vilnius, Lithuania
- [Operations Lead](https://feeny.ai/job/operations-lead-aspora-bengaluru-9jhwjg2m8b8d) — Bengaluru, India
- [Senior DevOps Engineer](https://feeny.ai/job/senior-devops-engineer-aspora-bengaluru-fny6defnnh01) — Bengaluru, India