Top Fintech Cybersecurity Jobs

Designs, implements, and strengthens cybersecurity controls across enterprise infrastructure, networks, endpoints, data centers, and branch locations. Responsibilities include firewall and identity security, threat detection, incident response, vulnerability management, system hardening, security monitoring, automation, compliance support, and ransomware protection. The role leads complex investigations and incident response efforts, coordinates remediation across technical teams, evaluates infrastructure risks, and serves as a senior escalation resource.

Lead enterprise SailPoint IdentityIQ and Identity Security Cloud implementations, including identity lifecycle management, provisioning, access certifications, RBAC, governance policies, integrations, custom rules, troubleshooting, audits, and compliance support. Collaborate with security, infrastructure, application, and business teams to improve identity governance and security controls.

Own the organization’s information security and compliance program, including AWS and identity security, SOC 2, PCI-DSS, NIST CSF, vendor risk, incident response, and launch readiness. Lead AI governance, tool approval, AI development pipeline guardrails, and regulatory monitoring. Partner with engineering and product on secure integrations, APIs, platform architecture, and technology roadmaps while documenting policies and advising leadership.

Administers and implements SailPoint Identity Security Cloud and related systems. Develops application onboarding processes, custom and out-of-the-box connectors, user lifecycle workflows, access certification rules, and reporting mechanisms. Manages application access roles and permissions with an emphasis on automation. Provides technical guidance to Information Security team members and participates in a minimal on-call rotation.

Leads and matures Topstep’s enterprise privacy and technical governance program. Manages privacy and governance teams, oversees DSARs, data mapping, vendor privacy assessments, privacy-by-design initiatives, incident response, regulatory compliance, and employee training. Directs IT governance and continuous audit readiness across SOC 2, ISO 27001, and NIST frameworks, while automating control monitoring and evidence collection. Advises Product, Engineering, Legal, Security, and executive stakeholders on privacy, risk, and technical governance.

Leads Bridgewater Bank’s cybersecurity architecture, engineering, operations, and continuous improvement. Oversees Azure, Microsoft 365, hybrid infrastructure, identity and access management, security controls, incident response, threat and vulnerability management, SIEM/SOAR, third-party assessments, audits, regulatory examinations, penetration testing, and remediation. Partners with information security, audit, compliance, technology, and business leaders to align controls with NIST CSF, strengthen cyber resilience, and communicate risks and recommendations to executives and board-level stakeholders.

Leads and develops a fraud analyst team responsible for investigating emerging threats, responding to incidents, and improving fraud-risk strategies. Owns investigative standards, playbooks, workflows, and tools while serving as an escalation resource for complex cases. Partners with Data Science, Customer Success, Product, Engineering, and business leaders to convert fraud insights into scalable signals, model improvements, and better customer outcomes. Supports customer conversations as a fraud subject-matter expert and coaches analysts on communicating risk decisions.

Leads the enterprise information security program, including security strategy, governance, risk management, compliance, incident response, business continuity, disaster recovery, third-party risk, audits, metrics, and executive reporting. The role manages security initiatives, vendors, and teams while advising leadership on threats and promoting organizational security awareness.

Designs and maintains network, cloud, firewall, SASE, and CASB security controls; conducts threat hunting, detection engineering, incident response, and forensic analysis; administers Microsoft Purview data governance, DLP, and eDiscovery; and manages business continuity and disaster recovery planning and exercises. Partners with legal, compliance, leadership, and business teams to address security risks and regulatory requirements.

Designs, implements, and maintains enterprise identity and privileged access management systems. Leads PAM and non-human identity lifecycle governance, eliminates standing privileges through just-in-time access, supports hybrid Active Directory and Entra ID environments, automates credential management using scripting and APIs, and establishes security policies and governance standards.