Top Fintech Cybersecurity Jobs

Build and operate the governance, risk, and compliance program across SOC 2, NIST CSF, ISO 27001, and related frameworks. Manage audits, control libraries, risk registers, policies, vendor assessments, due diligence, and compliance monitoring. Configure automated evidence collection through APIs, query compliance data using SQL, validate control effectiveness, coordinate remediation, and report risk posture to leadership. Partner with auditors, security, engineering, business teams, customers, and prospects while automating manual GRC workflows.

Leads GRC governance and enablement across change management, QA and testing, security and access governance, release readiness, training, adoption, communications, and control evidence. Partners with risk, compliance, business, technology, and implementation teams to establish scalable operating standards, coordinate strategic and BAU delivery, improve adoption and data quality, and support executive reporting in a regulated financial environment.

Own workforce identity and access management, including Okta administration, SaaS integrations, SSO, provisioning, lifecycle automation, RBAC/ABAC, privileged access, and non-human identity governance. Strengthen access controls and compliance evidence for ISO 27001 and SOC 2, support endpoint and SaaS security initiatives, investigate incidents, document processes, and participate in on-call coverage.

Security Operations Engineer responsible for deep-dive security investigations, threat hunting, incident response, log and telemetry analysis, and security monitoring in a 24/7 SOC. The role requires expertise in cloud security architectures, MITRE ATT&CK, SIEM, SOAR, EDR, and forensic investigations, along with strong documentation and communication skills. Responsibilities include identifying anomalies, analyzing incidents, prioritizing multiple security events, and collaborating independently or with the broader security team.

Manage high-exposure cyber insurance claims, including coverage evaluation, reserves, litigation, negotiations, mediations, and claim resolution. Coordinate active incident response with breach coaches, forensic investigators, communications teams, and cybersecurity vendors. Assess forensic findings, business interruption documentation, data restoration, and liability issues. Prepare reports, identify claim trends, support audits, engage brokers and reinsurers, and contribute to cyber claims strategy and thought leadership.

Leads enterprise security architecture reviews and serves as the escalation authority for complex security decisions. Performs threat modeling, risk assessments, control evaluations, and secure architecture design across applications, cloud, infrastructure, identity, networks, data, and AI. Develops reference architectures, standards, guardrails, maturity models, and transformation roadmaps. Mentors security architects, represents the function in governance forums, and partners with technology, risk, privacy, legal, and engineering stakeholders.

Lead and mature the enterprise information security program, oversee cybersecurity operations, GRC, risk management, IAM, vulnerability and third-party risk programs, ensure regulatory compliance, drive incident response and cyber resilience, and advise executive leadership and the Board on security strategy and investments.

Lead hardware and embedded security across device design, manufacturing, deployment, updates, and decommissioning. Develop security baselines, conduct architecture reviews and threat modeling, define requirements, validate controls, and drive remediation with hardware engineering teams. Focus areas include secure boot, firmware, FOTA, hardware root of trust, device identity, provisioning, cloud-connected devices, and secure-by-default engineering practices.

Designs and implements product security controls, secure applications, infrastructure, detection strategies, and incident response workflows. Investigates threats using endpoint, network, cloud, telemetry, threat intelligence, and forensic evidence. Conducts threat hunting, tactical forensics, vulnerability assessments, and cybersecurity infrastructure improvements while partnering with Product, Engineering, and Infrastructure teams. The role also establishes security standards, improves resilience, and embeds security practices across Airwallex’s applications and services.

Leads the global Security Products technology organization, setting strategy and managing software engineering teams. Oversees cybersecurity technologies, domain and brand protection, fraud protection, security monitoring, policies, risk mitigation, data center operations, customer onboarding, incident analysis, and continuous improvement. Partners with senior stakeholders and clients while ensuring technology capabilities align with business and security objectives.