Head of Payment Security & Transaction Integrity
Digital wallet and cryptocurrency exchange platform enabling Filipinos to buy, sell and manage crypto assets with integrated payment services.
About Coins.ph
Coins.ph serves as a regulated crypto platform for over 18 million Filipino users, offering cryptocurrency trading, bill payments, and remittance services. The platform integrates QR payments and mobile load purchases with crypto services, making digital assets accessible to Filipinos.
Skills
About the Role
You will establish and own the Payment Security and Transaction Integrity function protecting the integrity of payment flows across QRPH, Wallet, Merchant Payments, Crypto-Fiat rails, and future payment products. Rather than focusing on traditional cybersecurity, you will concentrate on business logic vulnerabilities, payment fraud, transaction manipulation risks, settlement integrity, and adversarial testing of payment systems. You will review payment flow designs before launch, build transaction verification controls, run a Payment Red Team program, lead incident investigations, partner closely with Fraud, Risk, Operations, Compliance, and Engineering teams, and chair the Payment Security Review Board.
Requirements
- 8+ years in payments, fintech, acquiring, banking, or transaction risk
- Deep understanding of payment systems, merchant acquiring, settlement, reconciliation, and transaction processing
- Experience with payment fraud, transaction abuse, or payment security
- Strong understanding of business logic vulnerabilities and adversarial thinking
- Ability to work across Engineering, Risk, Compliance, and Operations teams
Responsibilities
- Review and approve payment flow designs before production launch
- Conduct payment threat modeling for all new payment products
- Define secure transaction integrity standards
- Establish source-of-truth and immutable payment context frameworks
- Prevent amount tampering, currency manipulation, replay attacks, merchant spoofing, and settlement abuse
- Build transaction verification controls and payment validation mechanisms
- Define critical payment control requirements across all payment products
- Establish a Payment Red Team program
- Simulate malicious user behavior against payment systems
- Conduct business logic attack testing and abuse-case validation
- Lead investigations of payment-related security incidents
- Conduct root cause analysis and drive remediation
- Build a payment incident review and governance framework
- Partner with Fraud, Risk, Operations, Compliance, and Engineering teams
- Design monitoring and alerting frameworks for transaction anomalies
- Reduce financial losses caused by abuse, fraud, and system weaknesses
- Chair Payment Security Review Board
- Define payment security standards and launch approval processes
- Create risk acceptance and escalation frameworks
