Top Financial Services Cybersecurity Jobs in New York City, NY

Lead and execute the firms cybersecurity and operational risk programs, including AI security strategy, incident response, vendor security, compliance (SEC/FINRA/SOC2), secure architecture, and day-to-day security operations. Partner with executives, oversee audits and certifications, and build security awareness across the organization while remaining hands-on with tooling, design reviews, and threat management.

Lead and scale security engineering: define strategy, hire and mentor team, manage IAM, cloud security and multi-tenant data isolation, run detection and incident response, own vulnerability management, support SOC2/PCI compliance, and secure AI systems.

As CISO, lead Rain's security governance, risk, and compliance strategy focusing on ISO certification, regulatory readiness, and collaboration with various teams.

Own and mature the company’s DevSecOps and cloud security function. Responsibilities include implementing SOC 2 controls, automating compliance evidence, managing cloud security posture and runtime security, embedding security gates into CI/CD, leading vulnerability remediation, developing auto-remediation and AI-assisted workflows, and securing infrastructure through Terraform and policy-as-code. The role also partners with GRC and corporate security teams while building reusable security tooling and developer-platform guardrails.

Lead and scale enterprise WIAM governance: define policy and control standards, centralize governance, drive risk-to-control traceability, prioritize remediation, monitor KPIs and audit readiness, advise senior stakeholders, and mentor staff to strengthen control effectiveness and regulatory compliance.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Own the multi-year technical strategy and architecture for Coinbase’s enterprise IAM platform spanning human, AI agent, service, and workload identities. Drive adoption across 700+ systems, establish authentication and authorization standards, lead migrations and build-versus-buy decisions, automate audit and regulatory controls, reduce standing privilege, and mentor senior engineering talent. Partner across Security, Compliance, IT, Infrastructure, and product teams while influencing technical direction without direct authority.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Own technology compliance and security operations across AI governance, SOC 2, risk assessments, incident response, business continuity, vulnerability management, access reviews, and penetration testing. Manage client security questionnaires, vendor assessments, third-party risk, and audit coordination while monitoring security tools and coordinating remediation with engineering. Advise clients, auditors, regulators, legal teams, and compliance stakeholders on technical security matters.