Top Fintech Cybersecurity Jobs

Owns security and compliance across IT, software development, GCP infrastructure, and subprocessors. Responsibilities include managing SecOps tools, improving software security posture, conducting security and AI audits, maintaining compliance artifacts, developing data and AI governance, vetting technologies, and managing contractual security obligations. The role partners with engineering teams and requires experience with Vanta, cloud DevOps, infrastructure as code, identity platforms, security reviews, and regulated industries.

Lead and build a risk-aligned, automated IAM program across cloud, on-prem, and SaaS. Define IAM strategy and architecture, manage privileged access, implement lifecycle automation (JML), enforce RBAC/ABAC, deploy SSO/MFA, support PAM, and maintain controls for FFIEC, SOC 2, and PCI DSS compliance while partnering with engineering, compliance, and audit.

Own the second-line technology and cyber risk function, including risk frameworks, registers, appetite metrics, quantitative risk modeling, and board reporting. Independently assess security controls, penetration tests, vulnerabilities, AI systems, vendors, and regulatory requirements. Partner with Engineering and Security to identify infrastructure, application, model, cryptographic, and emerging technology risks while overseeing AI governance and supporting regulatory and counterparty assessments.

Architect and lead EarnIn’s Identity & Trust platform across authentication, authorization, identity verification, privacy, secure document processing, fraud prevention, and identity resolution. Define multi-year strategy, design resilient distributed systems, establish security and reliability standards, lead cross-team initiatives, advance guarded AI-assisted engineering workflows, mentor senior engineers, and partner with product, security, risk, compliance, and executive stakeholders.

Lead Security Engineer responsible for designing and implementing security strategy across cloud (GCP), container (Docker), CI/CD, and application security. Perform threat modeling, penetration testing, vulnerability management, incident response, and ensure compliance (HIPAA, SOC-2, PCI-DSS). Initially hands-on, then lead and mentor a team of 2–8 engineers while collaborating with product teams and reporting to the CTO.

Lead and expand the Application Security program: define roadmap, embed security into SDLC, perform architecture and code reviews, manage vulnerability lifecycle and incident response, lead penetration testing strategy, deliver executive metrics, and mentor a small hands-on AppSec team.

Build and own end-to-end authentication and authorization for the member platform, implement delegated/agent-based access and application-layer encryption, drive threat modeling and remediation, write RFCs and lead design reviews, and ship production code that protects sensitive member data.

Lead and own Moment's end-to-end security program: AppSec, cloud infrastructure security, IAM, vulnerability management, detection, and incident response. Build and hire the security team, scale programs for top-tier financial clients, manage SOC 2 and regulatory audits, run the Trust Center, represent security to customers, and lead incident response and postmortems.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Design, implement and support enterprise web security platforms (IBM Datapower, IBM Verify/IAM, MFA). Perform platform engineering, integrations, standards, troubleshooting of encryption, web traffic and packet analysis, scripting/automation, upgrades, and operational support across Unix/Windows/VMware environments while collaborating with clients and cross-functional teams.