Top Fintech Cybersecurity Jobs

Lead end-to-end IT audits globally to assess design and operating effectiveness of internal controls across technical platforms. Provide actionable recommendations, drive change, write clear reports, build relationships, and travel internationally (~25%).

Own and scale IT General Controls across NetSuite, Workday, Salesforce, and related enterprise applications. Lead access governance, segregation-of-duties processes, change management, audit readiness, evidence collection, and remediation. Partner with Internal Audit, External Audit, Security, Finance, and application owners on SOX compliance. Develop AI-native continuous controls monitoring, automated testing, anomaly detection, and governance for internal AI systems while modernizing the broader controls environment.

Lead the Identity and Access Management engineering team responsible for authentication and authorization systems. Define and deliver scalable solutions, ensure reliability and performance for critical high-load distributed systems, contribute hands-on through coding and system design, mentor engineers, conduct code reviews, and foster an inclusive, accountable team culture while managing stakeholders across the company.

The Cyber Security Engineer Co-Op will support IEX's Information Security team, gaining hands-on experience in compliance, operational tasks, and security programs while contributing to security initiatives.

Lead and execute the firms cybersecurity and operational risk programs, including AI security strategy, incident response, vendor security, compliance (SEC/FINRA/SOC2), secure architecture, and day-to-day security operations. Partner with executives, oversee audits and certifications, and build security awareness across the organization while remaining hands-on with tooling, design reviews, and threat management.

Lead and scale security engineering: define strategy, hire and mentor team, manage IAM, cloud security and multi-tenant data isolation, run detection and incident response, own vulnerability management, support SOC2/PCI compliance, and secure AI systems.

Senior individual contributor owning cloud security architecture for GCP. Design edge/perimeter defenses with Cloudflare and Cloud Armor, build policy-as-code and secure Terraform modules, lead threat modeling and security reviews, advance cloud detection and incident response, translate compliance requirements into technical controls, mentor engineers, and serve as the cloud security technical authority.

Oversees information security governance, risk, and compliance controls throughout their lifecycle. Reviews control design, documentation, execution, evidence, ownership, and data quality; facilitates walkthroughs and validation activities; supports audits, regulatory reviews, attestations, remediation, and corrective actions. Partners with control owners, process owners, cybersecurity teams, auditors, and risk stakeholders to identify gaps and improve the control environment.

Leads the architecture, engineering, integration, and continuous improvement of enterprise identity and access management solutions across cloud and on-premises environments. Oversees identity governance, authentication, authorization, privileged access, directories, lifecycle management, automation, and enterprise integrations. Establishes IAM standards, resolves complex technical issues, supports audits and remediation, evaluates emerging technologies, and provides technical leadership and mentorship. Participates in production support and on-call activities while partnering with security, architecture, technology, risk, and business stakeholders.

Lead and execute red team exercises and penetration tests across applications, infrastructure, and physical environments. Mentor teammates, develop automation tools, partner with detection/response teams, prioritize and drive remediation, and conduct adversarial simulations to improve detection and incident readiness.