Top Fintech Cybersecurity Jobs

Oversees information security governance, risk, and compliance controls throughout their lifecycle. Reviews control design, documentation, execution, evidence, ownership, and data quality; facilitates walkthroughs and validation activities; supports audits, regulatory reviews, attestations, remediation, and corrective actions. Partners with control owners, process owners, cybersecurity teams, auditors, and risk stakeholders to identify gaps and improve the control environment.

Leads the architecture, engineering, integration, and continuous improvement of enterprise identity and access management solutions across cloud and on-premises environments. Oversees identity governance, authentication, authorization, privileged access, directories, lifecycle management, automation, and enterprise integrations. Establishes IAM standards, resolves complex technical issues, supports audits and remediation, evaluates emerging technologies, and provides technical leadership and mentorship. Participates in production support and on-call activities while partnering with security, architecture, technology, risk, and business stakeholders.

Conducts advanced threat hunting to identify malicious activity and threat actors across the enterprise. Analyzes security data, tools, threat trends, and vulnerable assets; develops innovative detection techniques; operationalizes hunting capabilities with the Threat Management Center; and supports cyber incident response. The role requires expertise in insider threats, organized crime, fraud groups, and state-sponsored actors.

Lead fraud strategy for a consumer lending product, designing fraud typologies, analyzing repayment fraud and chargebacks, and managing fraud metrics. Build decision-engine rules, deploy and monitor machine-learning risk models, establish automated blocking and investigation workflows, and coordinate with Legal and Compliance on suspicious activity reporting. The role requires advanced analytics, knowledge of account takeover and synthetic fraud, and strong cross-functional communication.

Owns TD Insurance’s end-to-end PCI DSS compliance program, including scope validation, control ownership, evidence readiness, assessments, remediation, governance, executive reporting, and continuous compliance. Coordinates internal teams, auditors, Qualified Security Assessors, payment assessors, and third-party providers. Maintains PCI documentation, manages risks and exceptions, drives validated remediation, monitors regulatory changes, and improves automation, control effectiveness, and year-round assessment readiness.

Develop and tune SIEM detection rules, alerting mechanisms, and security use cases for sophisticated threats. Monitor and support SIEM platforms, reduce false positives, manage correlation logic, and develop SOAR automations. Create security metrics, dashboards, and reports while integrating SIEM capabilities into cyber response workflows. The role requires strong knowledge of threat exploitation, MITRE ATT&CK, indicators of compromise, data normalization, CI/CD, Python scripting, and cross-functional collaboration.

Advise Wealth Management stakeholders on U.S. and international privacy requirements, including GDPR, CCPA/CPRA, GLBA, and FCRA. Assess privacy risks in products, services, systems, AI models, and third-party arrangements; support privacy impact assessments, regulatory gap analyses, control implementation, data subject rights requests, guidance, and training. Collaborate with legal, compliance, business, product, process, and technology teams to translate complex privacy obligations into practical controls and business advice.

Develop and operate cloud security controls across AWS, GCP, and Azure. Build policy-as-code and detection-as-code solutions using Python, Terraform, OPA, SIEM queries, and YARA. Serve as a subject matter expert for security controls, compliance initiatives, system enhancements, and technology roadmaps. Diagnose root causes, assess risk, mentor junior engineers, influence engineering decisions, and support secure global enterprise applications.

Monitor security events 24x7, triage alerts, investigate incidents, analyze Splunk and other SIEM alerts, assess impact, identify false positives, document findings, and escalate threats as needed. Follow established playbooks while developing cybersecurity investigation and incident response expertise. The role supports U.S. federal contracts and may require on-site work in the DMV area and eligibility for a TS/SCI with CI Poly clearance.

Designs and demonstrates Workday Identity and Governance solutions for customers, prospects, and internal teams. Responsibilities include prototyping IAM/IGA use cases, developing demo solutions, learning new product capabilities, delivering technical enablement, presenting at marketing and sales events, collaborating cross-functionally, improving demo platform efficiency, and providing thought leadership to presales teams. Requires deep expertise in identity governance, authentication, authorization, cloud IAM, directories, automation, and technical presales.

Serve as the principal technical authority for enterprise endpoint security across macOS and Windows. Architect endpoint privilege management, application control, runtime safeguards, and secure AI and developer-tool governance. Integrate EDR, SSPM, telemetry, and automation platforms; establish security architecture and technical standards; advise leadership and vendors; lead design reviews, escalations, and multi-quarter roadmaps; and mentor junior and mid-level cybersecurity engineers.

Develops cybersecurity awareness learning experiences, communications, campaigns, multimedia content, and social engineering initiatives. Translates technical concepts for diverse audiences using instructional design, behavioral science, gamification, and storytelling. Measures learner engagement and program effectiveness through feedback, simulations, dashboards, and analytics while collaborating with cybersecurity, communications, learning, compliance, risk, and fraud partners.

Lead the enterprise AI security and Agentic AI program by designing secure AI agents for cybersecurity operations, integrating Microsoft AI and security platforms, and establishing governance, risk controls, auditability, and responsible AI practices. Build reusable frameworks and guardrails addressing prompt injection, permissions, data leakage, and unauthorized actions. Partner with Security, Risk, Compliance, Legal, and Technology teams to enable compliant enterprise AI adoption.

Conduct application security testing across the SDLC using DAST, SAST, SCA, and manual testing tools. Analyze vulnerabilities, guide developers on remediation and secure coding, integrate security scans into CI/CD pipelines, automate processes, manage findings and exceptions, and maintain compliance with NIST, PCI-DSS, FFIEC, SOX, and CIS frameworks. The role also requires scripting, collaboration with DevOps and development teams, vulnerability documentation, and continuous improvement of application security practices.

Supports red team operations through adversary emulation, assumed-breach testing, purple team exercises, and AI security assessments. Tests prompt injection, AI guardrails, data access, developer copilots, automation platforms, APIs, identity, and permissions. Researches attacker techniques targeting applications, CI/CD, and LLM systems; contributes to playbooks, evidence collection, reporting, and defensive collaboration. Also develops custom ML/LLM models and applies AI to improve cybersecurity controls and threat response.