Fintech Security Leader: Build & Scale Programme

Franklin Fitch; New York (NY); On-site; USD 250,000 - 420,000; Full time

Job summary

Franklin Fitch is seeking a Director of Security for a VC-backed fintech in New York, NY. This builder’s role will define the security programme end-to-end, with hands-on work initially and team-building as the programme matures.

You’ll work with engineering, compliance and the executive team to elevate security posture and governance. You’ll lead SOC 2, PCI DSS and NYDFS Part 500 readiness, align with partner banks, networks and enterprise customers, and own IAM, cloud security, logging and

Qualifications

• 8+ years in security, with leadership at a high-growth tech company.
• Experience in financial services or regulated environment with audits or partner diligence.
• Hands-on depth in AWS or GCP security, IAM, and application security.
• Track record of building programmes from early stage.

Responsibilities

• Define security roadmap, risk register, and policies; report to leadership and the board.
• Lead SOC 2, PCI DSS, and NYDFS Part 500 readiness; support partner diligence.
• Secure cloud infra, CI/CD, and SDLC with practical guardrails.
• Own IAM across workforce and production, incl. privileged access.
• Build logging, detection, incident response, and lead response.
• Manage third-party risk across vendors and sub-processors.
• Hire and develop the first security engineers.

Skills

Security leadership

Regulatory audits

Cloud security

IAM & access

IR & detection

Vendor risk

Team building

Job description

Franklin Fitch is seeking a Director of Security for a VC-backed fintech in New York, NY. This builder’s role will define the security programme end-to-end, with hands-on work initially and team-building as the programme matures.

You’ll work with engineering, compliance and the executive team to elevate security posture and governance. You’ll lead SOC 2, PCI DSS and NYDFS Part 500 readiness, align with partner banks, networks and enterprise customers, and own IAM, cloud security, logging and