Head of Security

Job description

Requirements

Deep technical skills. You can read code, reason about modern cloud architectures (AWS, Kubernetes), threat-model real systems, and ship security tooling yourself when the moment calls for it

Experience in running a security program at a fintech, trading firm, or financial infrastructure company, somewhere where the stakes were real and the regulatory bar was high

Confidence in front of senior client security teams. You've cleared enterprise security reviews at major institutions and can hold the conversation at the architecture level

A builder of the function mentality. This is a 0-to-1 leadership role, not a manager-of-existing-team role

(Desirable) Prior experience at a broker-dealer, market maker, fund administrator, or core fintech infrastructure provider

(Desirable) SOC 2 Type 2 audit experience as the lead or co-lead

(Desirable) Background in security engineering: CSPM, IAM, AppSec, detection engineering, or incident response with real shipped work, not just oversight

What the job involves

Moment runs mission-critical trading and data infrastructure for some of the largest financial institutions in the world. Our platform processes order flow, market data, and portfolio state for clients managing $10T+ in assets. Security isn't a feature on the roadmap, it's a precondition for the contracts we sign

We're hiring a Head of Security to own the security function end-to-end. This is the most senior security role at Moment today and you'll drive the strategy, build the program, hire the team, sit in front of customer security organizations, and own the answers

DRI the security program. Application security, cloud infrastructure security, identity and access management, vulnerability management, detection, and incident response. Set the standards and run the operations

Scale security programs. Be comfortable facing off with top-tier RIAs, broker-dealers, and global bank security teams. You'll lead those conversations end-to-end

Own compliance and regulatory posture. SOC 2, plus regulatory baselines relevant to broker-dealers and institutional financial infrastructure. Run audits, manage the Trust Center, and partner with Legal and Compliance as we expand into new asset classes and jurisdictions

Be the calm in incidents. When something breaks, you run the room, make the call, communicate to clients, and write the postmortem. Customers buy security leaders, not security tools

#J-18808-Ljbffr

Worksite address

new york, NY, 10261, US

Who can apply

Review the original listing for work authorization, qualifications and employer requirements.