Top Fintech Cybersecurity Jobs in New York City, NY

Own technology compliance and security operations across AI governance, SOC 2, risk assessments, incident response, business continuity, vulnerability management, access reviews, and penetration testing. Manage client security questionnaires, vendor assessments, third-party risk, and audit coordination while monitoring security tools and coordinating remediation with engineering. Advise clients, auditors, regulators, legal teams, and compliance stakeholders on technical security matters.

Monitor security events and analyze logs, NetFlow, and packet captures to identify threats and potential incidents. Escalate incidents, assess vulnerability intelligence, apply mitigation techniques, and support intrusion analysis, malware eradication, data loss prevention, and incident response. The role requires staying current with security technologies and emerging threats while communicating technical information effectively in a dynamic, on-site SOC environment.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead and build the DevSecOps function: implement SOC 2 controls, automate compliance and evidence pipelines, own cloud security posture, CI/CD security gates, vulnerability management, and AI-assisted auto-remediation to embed security as code across the developer lifecycle.

Leads red team operations, penetration testing, threat modeling, and adversarial simulations across applications, infrastructure, corporate, and physical environments. Develops security-testing tools, partners with detection and response teams, communicates and remediates findings, leads related incidents, and mentors offensive security engineers. The role requires advanced knowledge of cloud, containers, defensive evasion, identity security, network protocols, and MITRE ATT&CK, along with Python, Go, and JavaScript proficiency.

Own Footprint’s SOC 2, PCI DSS, GDPR, and ISO 27001 programs; manage audits, evidence, risk acceptance, identity and access, device security, vendors, cloud operations, disaster recovery, data lifecycle, and customer-facing security documentation. The role is the company’s dedicated IT and compliance function, responsible for systematizing controls, maintaining compliance platforms, coordinating auditors and penetration testers, and supporting Sales security questionnaires.

Coordinates third-party and intragroup IT service governance across the full lifecycle. Executes due diligence, cybersecurity and business continuity assessments, control monitoring, service reviews, assurance activities, remediation tracking, contract support, reporting, and audit evidence management. Partners with IT, procurement, legal, risk, finance, and external providers to ensure compliance with governance policies, operational resilience requirements, and financial-sector regulations.

Manages enterprise data privacy, governance, risk, and compliance programs within a banking environment. Partners with business, Legal, Compliance, Risk, Technology, and Operations stakeholders to implement privacy governance frameworks, conduct privacy risk assessments, strengthen controls, support privacy-by-design, and ensure lawful handling of personal data. Advises senior leaders on regulatory requirements, data quality, records management, and privacy implications of products, technologies, and business changes.

Design, build, and maintain SOAR playbooks and automated incident-response workflows; integrate security, IT, and cloud systems; deploy cloud security infrastructure via IaC; apply AI/LLM tools to security automation; collaborate with SOC, detection engineering, and IR teams; measure and report automation performance and ROI to leadership.