Top Financial Services Cybersecurity Jobs in New York City, NY

Establishes enterprise IAM engineering strategy, reference architectures, and reusable patterns across identity governance, privileged access, cloud platforms, and AI. Designs and modernizes IAM and PAM platforms using Java, microservices, APIs, Kubernetes, and cloud technologies. Leads secure identity integrations, authorization, observability, resiliency, deployment, and production support. Partners with senior stakeholders on roadmaps and regulatory requirements, mentors engineers, evaluates emerging technologies, and applies AI-assisted development responsibly in security-critical environments.

Performs technology control testing and cybersecurity risk assessments for Capital One’s technology organization. Designs and executes test plans, identifies control gaps, documents findings, evaluates compliance, and recommends mitigation strategies. The role communicates risk results to stakeholders, manages testing engagements, analyzes cyber risk metrics, and supports improvements across identity and access management, cloud technologies, networks, applications, and data environments.

Monitors, investigates, and responds to security incidents across hybrid and cloud environments. Responsibilities include SIEM/EDR/XDR monitoring, threat hunting, cloud log analysis, digital forensics, incident containment and recovery, playbook development, reporting, and participation in security exercises. The role protects organizational assets, supports cloud security posture improvement, and reduces detection and response times.

Leads technology risk and controls activities, including risk identification, assessment, reporting, governance, control testing, issue management, and regulatory compliance. Partners with technology and business stakeholders to evaluate control effectiveness, address gaps, and strengthen the organization’s risk posture. Uses and validates enterprise-authorized AI capabilities to synthesize evidence and support audit-ready reporting while maintaining data security and regulatory standards. Provides technical guidance and influences executive decision-making.

Leads enterprise AI security architecture and strategy across LLM applications, RAG pipelines, agent workflows, and cloud-native platforms. Establishes security standards, governance requirements, guardrails, threat models, and secure development patterns. Drives remediation of AI-specific risks including prompt injection, jailbreaks, data exposure, unsafe tool usage, and excessive permissions. Partners with senior engineering, product, architecture, and security leaders, leads investigations, supports automated security testing, represents AI security in governance forums, and mentors security engineers.

Leads SoFi’s Offensive Security function, unifying penetration testing and red teaming. Owns strategy, staffing, tooling, metrics, vendor relationships, regulatory engagement, and execution quality. Builds AI-assisted offensive security capabilities for reconnaissance, exploit development, attack-path analysis, testing, and reporting. Personally contributes to network, application, cloud, mobile, AI, and adversary-emulation engagements while hiring, coaching, and developing the team and partnering with engineering, risk, vulnerability management, and incident response.

Lead and scale Brigit's IT Operations: manage day-to-day support, own IAM/SSO (Okta), maintain VPN and security tooling (SIEM, IDS/IPS, firewalls), drive audit readiness (SOC, PCI, SOX), improve incident response, document processes, and partner cross-functionally on security and compliance.

Leads enterprise cybersecurity governance, compliance, audit, risk assessment, control assurance, and regulatory readiness. Establishes policies, frameworks, metrics, and executive reporting; oversees remediation of control deficiencies; modernizes GRC through automation and AI; and develops global teams. Partners with Technology, Product, Legal, Privacy, Risk, Internal Audit, regulators, and business leaders to manage cyber risk and drive enterprise-wide change.

Provides hands-on endpoint, mobile, network, and infrastructure security for executives, remote offices, and sensitive locations. Responsibilities include configuring devices and controls, conducting site security assessments, remediating gaps, troubleshooting security systems, coordinating with Physical Security and vendors, maintaining documentation and runbooks, supporting audits, and responding to urgent after-hours issues. Regular domestic and international travel is required.

The Regulatory Program Owner will manage broker-dealer compliance functions, oversee communications reviews, support compliance advisory, and enhance processes using AI tools.