Top Fintech Cybersecurity Jobs

Supports technology risk and cybersecurity governance by automating Identity Governance processes, maintaining security policies and controls, conducting risk assessments and audits, developing mitigation strategies, monitoring program metrics, and coordinating with Legal, Compliance, Enterprise Risk, auditors, and regulators. The role also helps ensure regulatory compliance and stays current on cybersecurity threats and requirements.

Owns enterprise detection engineering, threat hunting, and adversary emulation across endpoint, identity, cloud, network, and SaaS environments. Leads complex threat hunts and high-severity incident investigations, converts findings into durable detections and telemetry improvements, drives remediation across technical teams, influences security strategy, and mentors engineers and analysts. The role requires deep attacker-tradecraft expertise, SIEM and EDR experience, scripting, autonomous technical leadership, and strong communication with security, technology, legal, and regulatory stakeholders.

Leads data governance and privacy compliance within banking, advising on PDPA, FSA, IFSA, BNM MCIPD, and RMiT requirements. Conducts privacy gap assessments, DPIAs, transfer impact assessments, AI/ML risk evaluations, and data breach impact assessments. Develops policies, notices, SOPs, regulatory notifications, and training programs while engaging business units, executives, regulators, and auditors.

Leads enterprise Workforce IAM governance, including policies, standards, controls, reporting, risk assessments, audits, remediation, and modernization initiatives. Partners with Cybersecurity, Technology, Risk, Compliance, Audit, and business stakeholders to advance identity lifecycle management, access certification, RBAC, privileged access governance, segregation of duties, and exception management. Serves as an IAM subject matter expert, strategic advisor, and mentor while driving regulatory compliance and control effectiveness.

Designs and operationalizes IAM controls for human, non-human, and AI agent identities. Responsibilities include authentication, authorization, secrets management, lifecycle governance, least-privilege policy-as-code, identity architecture, monitoring, incident response, compliance, and integration with AI development teams. The role also builds and leads a technical team focused on agentic IAM and workload identity.

Leads information security and cybersecurity risk for Asset Management, overseeing GRC, application security, product security, and technology risk teams. Advises engineering and business leaders on secure application design, SDLC controls, vulnerability remediation, resiliency, regulatory compliance, and risk mitigation. Develops security testing strategies, drives adoption of security standards, manages global teams, and communicates complex technology risks to executives and technical stakeholders.

Leads the engineering, integration, deployment, and support of AI-powered security operations platforms. Designs security automation, SOAR integrations, RAG architectures, agent orchestration, evidence pipelines, observability, governance, and cloud-based security workflows. Partners across security, risk, data, and technology teams to improve investigations and reduce response times while managing AI-related risks. Provides technical leadership, establishes engineering standards, mentors staff, and communicates complex security risks to senior stakeholders.

Design, develop, and support CIAM solutions using IBM Verify in hybrid on-premises and Azure environments. Implement authentication, federation, and access management capabilities; troubleshoot incidents; optimize platform performance; and collaborate with engineering and security teams to ensure scalable, compliant identity solutions.

Lead application security responsibilities include evaluating SAST, SCA, DAST, API security, and AI-assisted testing; validating vulnerabilities; guiding remediation; embedding controls into CI/CD and cloud-native environments; analyzing security trends; producing risk dashboards; supporting governance and audits; and advising engineering and senior stakeholders on secure development and application risk.

Provides second-line cybersecurity and technology risk oversight for Key Technology Services and enterprise technology, data, and AI/ML environments. Evaluates controls, conducts risk and gap assessments, monitors security initiatives, assesses third-party and emerging technology risks, advises on mitigation, supports audits and regulatory examinations, and escalates significant issues. The role requires collaboration with business leaders, auditors, and regulators while tracking corrective actions and emerging cyber and AI risks.