Top Fintech Cybersecurity Jobs

Integrate security into software delivery and infrastructure workflows across AWS and GCP. Build scanning into CI/CD pipelines, maintain security guardrails, secure containerized workloads, implement least-privilege access and secrets management, and support compliance with SC TRM and BNM RMiT. Improve monitoring, vulnerability reporting, incident readiness, and secure delivery practices while collaborating with platform and engineering teams using multiple programming languages.

Leads second-line technology and cyber risk oversight for Sun Life’s U.S. business. The role owns the risk oversight program, challenges policies and control assessments, monitors incidents and key risk indicators, delivers executive and board reporting, assesses risk-management effectiveness, and drives continuous improvement. It also establishes strategy for evolving regulatory and technology risks, strengthens regional risk capabilities, and influences senior technology, security, business, and risk stakeholders while leading direct and indirect resources.

Build and lead AssetMark’s centralized enterprise IAM function, owning strategy, architecture, engineering, governance, compliance, and service delivery. Lead Microsoft Entra ID, Active Directory, Azure, Microsoft 365, application access, privileged access, identity lifecycle, authentication, and data-access governance. Establish Zero Trust, least privilege, IGA, PAM, automation, monitoring, audit readiness, and regulatory controls. Manage IAM engineers and compliance resources while partnering with cybersecurity, infrastructure, HR, risk, audit, application, and data teams.

Develop and mature insider risk policies, controls, and monitoring programs. Analyze user behavior and activity data to identify threats, lead sensitive investigations, coordinate with HR, Legal, Security, Technology, and business leaders, and recommend remediation. Produce executive and regulatory reporting, manage case documentation, deliver security awareness training, and advise business units on insider threat mitigation and compliance.

Investigates and responds to Tier 2 cybersecurity incidents across email, endpoints, identity, networks, and cloud. Manages cases from alert through containment and closure, conducts SIEM and EDR investigations, handles phishing and identity compromise, and coordinates third-party breach response. Authors detections, improves playbooks and automation, evaluates AI-assisted investigations, mentors Tier 1 analysts, documents evidence, supports threat hunts and purple-team exercises, and participates in an approximately quarterly SOC on-call rotation.

Implement, operate, and improve privileged access management controls across on-premises and cloud environments. Administer credential vaulting, password rotation, session management, and recording; onboard privileged accounts and systems; support least-privilege, JIT, and Zero Trust models; automate processes with PowerShell and APIs; and support monitoring, reporting, audits, and governance. Collaborate with infrastructure, cloud, security, and application teams in a regulated enterprise environment.

Assist Tencent’s Security Team with maintaining security infrastructure, protecting against cyber threats, and supporting compliance. Responsibilities may include SaaS security, identity and access management, DevOps and SRE automation, monitoring, logging, incident response, threat monitoring, and security data pipelines. The role requires programming, Linux, networking, systems, containerization, debugging, and collaboration skills, with opportunities to work across cloud, infrastructure, observability, and security operations projects.

Execute the Information Security GRC program: maintain policies, map and integrate security frameworks, run risk assessments, support audits and remediation, manage control testing and exceptions, assist incident response and BC/DR exercises, monitor phishing and InfoSec tickets, and provide reporting and training to ensure regulatory compliance and security posture.

Summer Associate supporting governance, risk, and compliance functions within a community bank. Responsibilities may include regulatory testing, compliance monitoring, risk assessments, third-party reviews, BSA/AML transaction monitoring, fraud investigations, internal audit testing, information security, and reporting. The role offers hands-on experience in a regulated banking environment and requires strong analytical, communication, collaboration, and problem-solving skills.

Leads high-stakes blockchain and cyber forensic investigations supporting litigation and disputes. Oversees on-chain tracing, asset tracking, dark web intelligence, legal report and exhibit preparation, expert testimony, and cross-functional case management. Partners with legal counsel, law enforcement, and external stakeholders to translate technical findings into actionable legal intelligence and lawfare strategy.