Top Fintech Cybersecurity Jobs in New York City, NY

Leads information security strategy and execution for the Federal Reserve System’s District IT and Corporate Services portfolio. Advises senior technology and business leaders, manages cybersecurity risk and tolerance, develops resilient security practices, and partners across a matrixed organization to deliver secure technology services. Builds high-performing, AI-savvy teams, drives change and innovation, manages stakeholders and external partners, and aligns security initiatives with business objectives and system standards.

Investigates fraud alerts, referrals, suspected fraudulent activity, account takeover, and identity concerns. Reviews evidence, validates client activity, manages cases, documents findings, dispositions alerts, secures compromised accounts, and supports transaction reversals. The role also analyzes fraud trends, identifies control gaps, recommends process improvements, communicates with affected clients and business partners, and escalates significant issues. Candidates need analytical, communication, organizational, and decision-making skills, financial services or fraud experience, and proficiency with Microsoft Excel and Word.

Leads risk strategy and advisory activities for Emerging and B2B businesses, translating complex technology and cybersecurity risks into executive presentations and strategic recommendations. Advises stakeholders across business, technology, cyber, compliance, and lines of defense; identifies risks and process improvements; oversees technology initiatives; leads cross-functional programs; and drives risk reporting, mitigation strategies, and continuous improvement. The role requires strong technical writing, analysis, communication, and technology risk management expertise.

Own workforce identity and access management, including Okta administration, SaaS integrations, SSO, provisioning, lifecycle automation, RBAC/ABAC, privileged access, and non-human identity governance. Strengthen access controls and compliance evidence for ISO 27001 and SOC 2, support endpoint and SaaS security initiatives, investigate incidents, document processes, and participate in on-call coverage.

Security Operations Engineer responsible for deep-dive security investigations, threat hunting, incident response, log and telemetry analysis, and security monitoring in a 24/7 SOC. The role requires expertise in cloud security architectures, MITRE ATT&CK, SIEM, SOAR, EDR, and forensic investigations, along with strong documentation and communication skills. Responsibilities include identifying anomalies, analyzing incidents, prioritizing multiple security events, and collaborating independently or with the broader security team.

Manage high-exposure cyber insurance claims, including coverage evaluation, reserves, litigation, negotiations, mediations, and claim resolution. Coordinate active incident response with breach coaches, forensic investigators, communications teams, and cybersecurity vendors. Assess forensic findings, business interruption documentation, data restoration, and liability issues. Prepare reports, identify claim trends, support audits, engage brokers and reinsurers, and contribute to cyber claims strategy and thought leadership.

Provides global legal counsel on cybersecurity laws, regulations, incident response, third-party risk, audits, regulatory inquiries, information security policies, and emerging technologies. Advises Global Security and cross-functional stakeholders, manages regulatory and law-enforcement interactions, supports executive and board reporting, and contributes to training and tabletop exercises. Requires a JD, active bar membership, and at least eight years of legal experience, with extensive cybersecurity and privacy law expertise.

Leads the first-line technology control testing function across Services products and platforms. Responsibilities include building risk-based test plans, executing Test of Design and Test of Operating Effectiveness, assessing control ownership, documenting findings, managing remediation and escalations, coaching staff, and reporting results. The role also develops testing standards, incorporates regulatory and data-residency requirements, and partners with engineering teams to automate testing, including AI-enabled approaches.

Manage security and privacy compliance controls, policies, procedures, and audit evidence. Coordinate control activities, maintain documentation, support ISO and SOC audits, analyze control issues, and facilitate remediation. Partner cross-functionally to strengthen compliance practices, support customer security questionnaires, contribute to risk-aware culture, and improve audit efficiency through AI governance and tools.

Leads cybersecurity oversight for critical third-party service providers, including security monitoring, vulnerability and incident impact analysis, remediation tracking, and risk escalation. Develops security frameworks for tokenization and digital asset providers, strengthens cross-functional engagement, and implements automation and data-driven processes to improve vendor risk management. Communicates material cybersecurity risks and recommendations to senior leadership.