Top Fintech Cybersecurity Jobs

Provides independent second-line oversight of enterprise technology risk, challenging first-line risk assessments, controls, ratings, and remediation. Monitors risk appetite alignment, indicators, emerging risks, incidents, and governance activities; conducts thematic reviews; escalates material exposures; supports executive and Board reporting; and advises technology, cybersecurity, legal, compliance, audit, and ERM stakeholders while maintaining independence.

Own Kikoff’s data security roadmap across AWS, Snowflake, RDS, and internal pipelines. Design and implement encryption, tokenization, least-privilege access, access brokering, row- and column-level controls, audit logging, secure data flows, and AI agent permissions. Partner with Legal and Compliance on privacy and regulatory requirements, threat-model new systems, and create reusable secure engineering patterns. Support data mapping, retention, deletion, and cross-border data controls in a regulated fintech environment.

Leads technology risk management across cloud, infrastructure, applications, cybersecurity, data, and emerging technologies. Conducts risk assessments, evaluates controls, oversees remediation, supports governance and RCSAs, and provides independent risk perspectives on technology initiatives. Assesses AI and cloud risks, develops KRIs and reporting, and uses Python, SQL, Power BI, or similar tools for automation and continuous monitoring. Partners with engineering, cybersecurity, compliance, and enterprise risk stakeholders.

The Senior Fraud and Risk Engineer will design and scale fraud detection systems, own the risk infrastructure, and optimize fraud performance for a fintech payment platform.

Participate in IT security operations, including cataloging on-premises and cloud log sources, maintaining SIEM reporting, analyzing and improving alerts, reviewing security events, supporting audit compliance, correlating changes with tickets, identifying malicious activity, and conducting vulnerability scans. The intern will work with security technologies such as SIEM, DLP, antivirus, firewalls, DAST, SAST, and file integrity monitoring while developing practical information security experience.

Leads the architecture and evolution of enterprise identity security across IGA, authentication, authorization, directories, privileged access, cloud, and non-human identities. Designs solutions using SailPoint, Okta, Active Directory, AWS, Terraform, GitHub, and Delinea Secret Server; builds automation and infrastructure-as-code; supports audits and regulatory examinations; evaluates Zero Trust and emerging identity capabilities; and mentors engineers while driving cross-functional initiatives and responsible AI adoption.

Supports the bank’s IT infrastructure, help desk, technology vendors, system migrations, physical security, access control, risk management, and user access reviews. Provides end-user training, social engineering testing, cybersecurity alert monitoring, and escalation support. Maintains servers, computers, and printers, while preparing security program updates and reports for senior management and the IT Steering Committee. Ensures compliance with security policies, banking regulations, confidentiality requirements, and recordkeeping standards.

Owns day-to-day SOC detection, alert triage, incident response, vulnerability management, threat hunting, and purple team activities. The role investigates security events across SIEM, EDR, network, cloud, and identity platforms; develops detection rules; prioritizes vulnerabilities; supports compliance audits; documents incidents and procedures; and mentors junior analysts. Requires on-call participation and primarily on-site work four days per week.

Support Galaxy’s Product Security team by developing and refining secure engineering standards covering authentication, authorization, API communication, web UI security, and secure coding. The intern may add implementation guidance and develop custom libraries, artifacts, or other resources that help software and production engineering teams apply security practices. The role is remote in the UK or US during the fall semester and includes hands-on work in cybersecurity, secure engineering, and product development.

Lead authentication fraud strategy to minimize ATO and scam losses while optimizing customer experience. Build data-driven detection, monitoring, graph analysis, and AI-integrated risk workflows. Partner with product, data, ops, and IT to implement analytics, alerts, and operational processes for authentication risk.