Top Fintech Cybersecurity Jobs in New York City, NY

The Regulatory Program Owner will manage broker-dealer compliance functions, oversee communications reviews, support compliance advisory, and enhance processes using AI tools.

The Cyber Security Engineer Co-Op will support IEX's Information Security team, gaining hands-on experience in compliance, operational tasks, and security programs while contributing to security initiatives.

Lead and execute the firms cybersecurity and operational risk programs, including AI security strategy, incident response, vendor security, compliance (SEC/FINRA/SOC2), secure architecture, and day-to-day security operations. Partner with executives, oversee audits and certifications, and build security awareness across the organization while remaining hands-on with tooling, design reviews, and threat management.

Lead and scale security engineering: define strategy, hire and mentor team, manage IAM, cloud security and multi-tenant data isolation, run detection and incident response, own vulnerability management, support SOC2/PCI compliance, and secure AI systems.

As CISO, lead Rain's security governance, risk, and compliance strategy focusing on ISO certification, regulatory readiness, and collaboration with various teams.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Own the multi-year technical strategy and architecture for Coinbase’s enterprise IAM platform spanning human, AI agent, service, and workload identities. Drive adoption across 700+ systems, establish authentication and authorization standards, lead migrations and build-versus-buy decisions, automate audit and regulatory controls, reduce standing privilege, and mentor senior engineering talent. Partner across Security, Compliance, IT, Infrastructure, and product teams while influencing technical direction without direct authority.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Lead fraud strategy and influence business, product, and operational decisions across a rapidly growing identity and risk company. Responsibilities may include advising on fraud trends and attack patterns, translating insights into strategic recommendations, improving fraud prevention operations, partnering cross-functionally, engaging executive stakeholders, representing the company through industry thought leadership, and defining best practices for fraud, identity, and risk management.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.