Top Fintech Cybersecurity Jobs

Lead development and execution of the enterprise information risk strategy, independently challenge first-line cybersecurity, report risks to the Board, manage incident response, ensure regulatory compliance (GLBA, SOX, PCI-DSS), assess AI/ML risks, oversee audits and maturity assessments, and drive security awareness, disaster recovery, and business continuity programs across the bank.

Design, tune, and maintain detection content across endpoint, network, cloud, and identity sources. Triage and investigate incidents, perform forensics, and run post-incident reviews. Build AI-enabled SOC workflows, pilot LLM tools, and automate response with SOAR and scripts. Partner with cloud, network, and identity teams to close visibility gaps and document policies, playbooks, and detection coverage.

Lead IT compliance activities including audits, assessments, evidence management, remediation tracking, and control improvement across PCI DSS, GLBA, NIST CSF, cloud/SaaS, and vendor risk. Partner with security, IT, audit, and legal to support exams, document controls, prepare metrics, and translate regulatory changes into operational updates.

Designs and maintains network and application security controls, performs forensics and penetration testing, monitors logs and incidents, architects cloud and DevSecOps security, advises development and operations teams, and implements threat detection, IDS/IPS, and event management solutions to protect information assets and ensure compliance.

Design, implement, and operationalize fraud detection and prevention across authentication, trading, crypto, and admin workflows. Own telemetry, investigate incidents using logs and data warehouses, build detection models and scoring systems, tune alerting/triage workflows, and translate findings into playbooks and engineering requirements to reduce fraud and strengthen controls.

Provide senior-level information security consulting for Treasury Services: continuous monitoring, vulnerability management, incident response, security policy/governance, SOC escalation, process improvement, and client advising across cloud environments.

Plan and execute IT audits, perform IT risk assessments, test IT general and application controls, document findings and recommendations, prepare audit reports, and track remediation while communicating results to stakeholders and applying project management principles.

Protect on-premises and cloud environments through security monitoring, incident response, threat hunting, vulnerability analysis, and advisory support. Investigate alerts from SIEM/EDR/XDR/IDS/IPS, perform root cause analysis and containment, tune detections, advise on remediation and secure configurations, and partner with teams to improve security posture.

Design, build, and maintain security automation workflows (SOAR, scripts) to integrate SIEM, EDR, IAM, ticketing and cloud tools. Automate alert triage, enrichment, containment, reporting, and control validation to reduce analyst workload and improve detection/response for cyber, fraud, and identity incidents. Participate in on-call rotation.

Administer, configure, and enhance enterprise GRC platforms; integrate with applications and data pipelines; troubleshoot performance and integrations; implement security and compliance controls; provide user support, training, and documentation; evaluate emerging technologies; and drive cross-team technical collaboration to deliver GRC solutions.