Top Cybersecurity Jobs

Provide independent assurance and advisory services over technology, cybersecurity, data, cloud, AI, and business transformation initiatives. Plan and execute audits (risk assessment, scoping, testing, reporting), evaluate ITGCs and automated controls, and use data analytics, automation, and AI tools to improve audit effectiveness and communicate findings to stakeholders.

Leads Raymond James’s IT compliance program and governance framework. Oversees compliance methodologies, risk assessments, monitoring, testing, and regulatory change management across technology, cybersecurity, privacy, AI, cloud, and third-party risk. Advises senior leadership on emerging compliance risks and partners with technology, security, privacy, legal, risk, audit, and business teams to maintain regulatory compliance and independent oversight.

Serves as the strategic bridge between Cybersecurity and IT Infrastructure teams and the Digital organization. Advises senior leaders, communicates security and infrastructure risks, reports on program progress, defines cybersecurity requirements, coordinates third-party risk assessments, supports transformation initiatives, promotes security policies, and partners with Compliance, Legal, and IT teams to deliver secure, scalable infrastructure.

Designs and develops secure systems and architectures for U.S. Navy missions. Responsibilities include analyzing engineering and security requirements, hardening systems, reducing attack surfaces, applying secure coding and operating-system security practices, evaluating architectures against adversary threats, and implementing cybersecurity countermeasures across system lifecycles.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

The Sr. Manager of Information Risk & Controls drives the risk management evolution by leading risk identification, developing frameworks, and collaborating with teams across Invesco.

Leads cybersecurity risk identification, assessment, mitigation, and control implementation. Supports HIPAA and PCI DSS compliance, customer cybersecurity surveys, evidence collection, stakeholder coordination, compliance monitoring, metrics, and leadership reporting. Advises business and technology stakeholders on secure technology decisions, applies NIST, ISO, ITIL, and COBIT frameworks, and mentors less experienced team members.

Conduct mixed-method behavioral research on cybersecurity, privacy, artificial intelligence, risk, trust, and human behavior. Design and lead interviews, focus groups, surveys, and experiments; analyze quantitative and qualitative data; publish findings; support grant proposals; mentor student researchers; manage project milestones; and disseminate results with interdisciplinary and international collaborators.

Maintains information system security postures for DoD Collateral, SCI, and SAP environments. Supports continuous monitoring, authorization packages, RMF assessment and authorization activities, configuration management, vulnerability remediation, audit reviews, media protection, incident handling, and security training. Coordinates system changes with ISSMs and authorizing officials while ensuring compliance documentation and security safeguards remain current.

Maintains the security posture of DoD information systems supporting Collateral, SCI, and Special Access Programs. Responsibilities include preparing RMF authorization packages, monitoring systems, managing configuration changes, conducting security impact analyses, maintaining compliance documentation, reviewing audit records, identifying vulnerabilities, supporting remediation, overseeing media sanitization and system recovery, and assisting with physical, personnel, incident-handling, and security-awareness activities.

Ten-week, on-site Internal Audit IT and Cybersecurity internship supporting technology risk assessments, control evaluations, audit testing, system configuration reviews, and cybersecurity assessments. Interns examine access management, data integrity, network security, cloud platforms, applications, and automated processes while documenting findings and recommendations. The role includes mentorship, professional development, and exposure to audit standards and financial technology environments.

Lead Citi’s enterprise Insider Threat program within the Cybersecurity Fusion Center. Responsibilities include defining strategy, managing and developing multidisciplinary teams, implementing data-centric detection and response processes, applying AI and advanced analytics, integrating behavioral and technical indicators, advising senior stakeholders, coordinating governance and risk controls, and engaging industry and government partners. The role requires extensive cybersecurity leadership, insider threat expertise, incident response experience, and the ability to drive global transformation.

Lead the development and execution of Citi’s enterprise insider threat program. Responsibilities include strategic planning, AI-driven threat detection, data-centric process implementation, threat triage and response, stakeholder engagement, governance, risk management, metrics, reporting, and incident response support. The role partners with cybersecurity, legal, HR, compliance, risk, technology teams, industry peers, vendors, and government agencies while helping drive organizational transformation and mentor team members.

Designs, implements, operates, and improves security controls for information systems, networks, applications, and data. The role supports risk management, incident response, vulnerability reduction, compliance, continuous monitoring, security control assessments, and DoN enterprise system accreditation. Responsibilities include analyzing scan results, documenting findings, applying security frameworks, and collaborating with technical and nontechnical stakeholders. The position is onsite in New Orleans and requires U.S. citizenship and an active interim Secret clearance.

Advises strategic enterprise customers on cybersecurity, cloud security, compliance, privacy, and risk. Leads security reviews and executive briefings for CISOs and risk leaders, presents Salesforce’s security architecture and controls, supports audits, questionnaires, contractual requirements, and escalations, and creates customer-facing security materials. Partners with Sales, Customer Success, Legal, Product, Engineering, and Security teams while translating complex technical and regulatory topics into actionable guidance.

Leads global cybersecurity governance, risk, compliance, identity and OT security programs. Establishes enterprise security frameworks, integrated risk management, regulatory compliance, audit readiness, IAM governance, Zero Trust alignment, and OT security controls. Advises executive leadership and supports board reporting, M&A due diligence, security assessments, investment decisions, and regulatory exposure management. Builds and develops global security teams, manages budgets and vendors, and drives measurable improvements across IT, OT, cloud, product, manufacturing, and third-party environments.

Leads cybersecurity integration for newly acquired sites, including security assessments, firewall and VPN deployment, network segmentation, Zero Trust and Entra ID configuration, EDR and SIEM onboarding, email security, vendor coordination, documentation, and operational handoff. The role independently owns security architecture from assessment through steady-state transition, with approximately 75–80% travel to domestic and international acquisition sites and occasional after-hours or weekend cutovers.

Plans, coordinates, and governs the cybersecurity program, aligning initiatives with organizational objectives, regulatory requirements, and security strategy. Oversees cybersecurity roadmaps, budgets, vendors, project portfolios, reporting, and knowledge management within the CISO organization. Requires cybersecurity program management experience and familiarity with Microsoft 365 tools, healthcare regulations, and security frameworks.

Leads SIEM engineering and cloud security for hybrid on-premises and cloud environments. Responsibilities include onboarding applications and workloads, integrating and parsing log sources, creating detection use cases, securing AWS and Azure migrations, supporting EDR and network monitoring, and applying incident response, identity management, segmentation, DLP, and healthcare security practices.

Provides senior cybersecurity and ISSM support for Air Force enterprise IT programs. Responsibilities include RMF compliance, continuous monitoring, authorization and security documentation, risk and configuration assessment, incident and vulnerability reporting, cybersecurity training, and advising authorization officials and program managers. The role also oversees security controls, corrective actions, developer findings, and cybersecurity personnel while supporting Agile development environments.

Provides senior ISSM cybersecurity support for Air Force REMIS, including RMF compliance, continuous monitoring, security control assessment, authorization maintenance, vulnerability tracking, configuration-change analysis, incident reporting, and cybersecurity documentation. The role guides ISSOs and privileged users, supports corrective actions, evaluates automated security findings, and ensures compliance with DoD and Air Force cybersecurity policies. Requires substantial cybersecurity experience, U.S. citizenship, a T3/Secret clearance, and an advanced DCWF ISSM certification.

Leads enterprise cybersecurity strategy, governance, operations, and transformation in a Microsoft 365 cloud-first environment. Develops security roadmaps aligned with NIST and CIS frameworks, manages internal teams and MSSP partnerships, and oversees threat detection, incident response, vulnerability management, identity governance, cloud security, security awareness, and crisis preparedness. Provides executive reporting and drives continuous improvement across the organization's cybersecurity posture and resilience.

Provides cybersecurity engineering and ISSE support for the C2BMC missile defense program. Responsibilities include administering endpoint protection, SIEM, vulnerability scanning, and compliance tools; automating cybersecurity agent deployments; analyzing security events; conducting STIG assessments; developing SIEM queries, dashboards, and data pipelines; and supporting control validation, POA&M remediation, and Cyber Tasking Orders. The role requires active Top Secret clearance, IAT/IAM 8140 certification, on-site work at Schriever Space Force Base, and 10% travel.

Supports SOC and regional teams by designing, standardizing, implementing, and operationalizing application security monitoring controls. Partners with application, technology, business, risk, audit, and cybersecurity stakeholders to assess risks, define detection requirements, onboard logs, test controls, document procedures, track remediation, and improve monitoring maturity. Maintains metrics, reporting, governance documentation, reusable monitoring standards, and process automations across global regions and business lines.

Monitor and investigate security alerts across endpoints, identity, cloud, email, networks, and applications. Manage vulnerabilities and remediation lifecycles, review access controls, support incident response, hardening, phishing prevention, audits, PCI DSS compliance, and external security assessments. Maintain evidence and documentation, coordinate with technical teams and vendors, communicate risks to stakeholders, and identify opportunities to automate security monitoring and reporting.