Top Fintech Cybersecurity Jobs

Owns information security risk management, control assurance, and ISO 27001 ISMS governance across a regulated fintech group. Responsibilities include maintaining risk and control registers, assessing control design and effectiveness, testing evidence, tracking remediation, defining security metrics, and preparing governance reporting. The role partners closely with the Group CISO and control owners to challenge risk assessments, manage residual risk, and maintain security policies, exceptions, and compliance documentation.

Lead Prelim’s security program across secure SDLC, application and cloud security, IAM, incident response, endpoint management, vendor risk, security reviews, and SOC 2 Type II compliance. Partner with DevOps and engineering, coordinate penetration testing, develop policies and risk roadmaps, manage audits and customer questionnaires, and improve detection and access controls. The role is the company’s first dedicated security hire and requires strong judgment, communication, and hands-on technical skills.

Conduct attacker-driven security research on Aave protocol changes, smart contracts, integrations, and critical dependencies. Review architecture and code before audits or deployment, identify exploitable protocol risks, contribute to AI-assisted security tooling, and translate findings into invariants, testing, monitoring, and incident-response improvements. Collaborate with engineers, auditors, and monitoring teams while communicating risk, severity, uncertainty, and trade-offs clearly.

Supports cybersecurity governance, risk management, and compliance initiatives, including control and policy development, framework alignment, audits, third-party risk assessments, risk tracking, remediation coordination, reporting, access reviews, and security awareness activities. Collaborates with technology, risk, and business stakeholders to strengthen the organization’s security posture and ensure timely completion of governance deliverables.

Serve as the technical partner to sales executives by demonstrating the cybersecurity platform, evaluating prospect use cases, and presenting Proof of Value outcomes. Engage enterprise security stakeholders, including researchers, application security and incident response managers, architects, and CISOs. Capture customer feedback, recommend technical solutions, and support new client acquisition across global enterprise accounts.

Applies security best practices to optimize systems, analyzes and resolves security challenges, drives cross-functional security initiatives, collaborates with engineers, and improves security processes and team effectiveness. The role requires independent security decision-making and alignment of solutions with business objectives.

Leads internal and MSSP-supported SOC operations, including monitoring, incident response, threat hunting, detection engineering, automation, telemetry management, and KPI reporting. Manages Microsoft Sentinel and Defender XDR capabilities, improves detection quality, coordinates major incidents, governs use-case lifecycles, and develops SOC analysts. Partners with technical, compliance, legal, and business stakeholders to strengthen cyber defense, operational readiness, and risk reduction.

Develop and improve enterprise security controls, investigate security alerts and incidents, tune detections, automate security processes, assess hybrid infrastructure and cloud configurations, and partner with infrastructure and application teams. The role independently owns security initiatives from problem identification through implementation, documentation, operation, and continuous improvement.

Own Flex’s IT and corporate security function as a hands-on senior individual contributor. Responsibilities include identity and access management, joiner-mover-leaver processes, Okta and Google Workspace administration, endpoint and MDM programs, SaaS governance, access reviews, security policies, awareness training, MSP management, and automation using scripts and internal tooling. The role partners with security, People, Finance, and Legal while maintaining corporate security posture across a distributed workforce.

Implements, administers, monitors, and maintains enterprise security systems including firewalls, VPN, endpoint protection, SIEM, data loss prevention, vulnerability management, and access control. Responds to alerts, incidents, and service requests; performs troubleshooting, upgrades, patching, documentation, and change management. The role collaborates with vendors, supports end users, participates in on-call rotations, mentors junior engineers, and contributes to security solution design and process improvements.