Top Financial Services Cybersecurity Jobs in New York City, NY

Leads the enterprise cybersecurity exercise and simulation program, including strategy, governance, scenario development, execution, evaluation, metrics, reporting, and continuous improvement. Manages a cybersecurity team and oversees talent development, workforce planning, and program documentation. Partners with security, resilience, technology, risk, and executive stakeholders to strengthen cyber preparedness, incident response, operational resilience, and remediation of identified gaps.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Ten-week, on-site Internal Audit IT and Cybersecurity internship supporting technology risk assessments, control evaluations, audit testing, system configuration reviews, and cybersecurity assessments. Interns examine access management, data integrity, network security, cloud platforms, applications, and automated processes while documenting findings and recommendations. The role includes mentorship, professional development, and exposure to audit standards and financial technology environments.

Lead end-to-end continuous monitoring of third- and fourth-party risks across cybersecurity and enterprise risk domains using BitSight, Supply Wisdom and NCFTA feeds. Triage and escalate alerts, coordinate remediation with TPMs, Legal, Compliance and Cyber Defense, perform due diligence and reassessments, maintain audit-ready records in Archer, support reporting and regulatory exams, and contribute to program enhancements and reconciliations.

Lead threat intelligence analysis across the full intelligence cycle, translate ambiguous questions into actionable intelligence, brief technical and executive audiences, partner with Cyber Defense and engineering to inform detection and mitigation, guide intel tooling and automation, and evolve intelligence requirements.

Coordinates third-party and intragroup IT service governance across the full lifecycle. Executes due diligence, cybersecurity and business continuity assessments, control monitoring, service reviews, assurance activities, remediation tracking, contract support, reporting, and audit evidence management. Partners with IT, procurement, legal, risk, finance, and external providers to ensure compliance with governance policies, operational resilience requirements, and financial-sector regulations.

Manages enterprise data privacy, governance, risk, and compliance programs within a banking environment. Partners with business, Legal, Compliance, Risk, Technology, and Operations stakeholders to implement privacy governance frameworks, conduct privacy risk assessments, strengthen controls, support privacy-by-design, and ensure lawful handling of personal data. Advises senior leaders on regulatory requirements, data quality, records management, and privacy implications of products, technologies, and business changes.

Own the strategy, roadmap, delivery, governance, and continuous improvement of a client-facing MFA platform across web and mobile channels. Lead cross-functional teams across engineering, cybersecurity, fraud, risk, compliance, legal, design, analytics, and operations. Manage authentication capabilities, security controls, privacy, client experience, adoption, operational readiness, metrics, and regulatory requirements while reducing fraud and account takeover risk.

Leads the Security Platforms function, overseeing cloud, network, endpoint, data, and platform security capabilities. Owns operating plans, budgets, workforce planning, vendor relationships, service delivery, modernization, and operational performance. Develops technical teams, establishes measurable outcomes, drives continuous improvement, and partners with cybersecurity, technology, risk, and business leaders to strengthen enterprise security and reduce risk.

Designs, develops, integrates, deploys, and supports Saviynt EIC identity governance solutions. Responsibilities include JML lifecycle automation, access requests, provisioning, certifications, RBAC, SoD controls, application integrations, API and connector development, troubleshooting, production support, documentation, release management, and mentoring. The role partners with cybersecurity, architecture, application, infrastructure, HR, audit, and engineering teams to deliver scalable IGA capabilities.