Head of Security

Moment; New York (NY); On-site; USD 150,000 - 250,000; Full time

Job summary

Moment is seeking a Head of Security to oversee the entire security function. This senior role involves driving the security strategy, building the program, and managing compliance within a high-stakes environment.

The candidate will have deep technical skills, experience leading security programs at fintech firms, and confidence in front of client security teams. Effective incident management and communication are crucial for this role, which spans significant regulatory responsibilities.

Qualifications

• Experience in fintech, trading firm, or financial infrastructure company.
• Proven ability to engage with senior security teams.
• Experience dealing with high-stakes security compliance and regulations.

Responsibilities

• Own the end-to-end security function at Moment.
• Drive security strategy and build the security program.
• Manage application security and vulnerability management.
• Scale security programs and interact with customer security organizations.
• Handle compliance, audits, and manage regulatory posture.
• Lead incident responses and communicate effectively with clients.

Skills

Deep technical skills

Experience in running a security program

Confidence in front of senior client security teams

Builder of the function mentality

SOC 2 Type 2 audit experience

Background in security engineering

Job description

Requirements

• Deep technical skills. You can read code, reason about modern cloud architectures (AWS, Kubernetes), threat-model real systems, and ship security tooling yourself when the moment calls for it
• Experience in running a security program at a fintech, trading firm, or financial infrastructure company, somewhere where the stakes were real and the regulatory bar was high
• Confidence in front of senior client security teams. You've cleared enterprise security reviews at major institutions and can hold the conversation at the architecture level
• A builder of the function mentality. This is a 0-to-1 leadership role, not a manager-of-existing-team role
• (Desirable) Prior experience at a broker-dealer, market maker, fund administrator, or core fintech infrastructure provider
• (Desirable) SOC 2 Type 2 audit experience as the lead or co-lead
• (Desirable) Background in security engineering: CSPM, IAM, AppSec, detection engineering, or incident response with real shipped work, not just oversight

What the job involves

• Moment runs mission-critical trading and data infrastructure for some of the largest financial institutions in the world. Our platform processes order flow, market data, and portfolio state for clients managing $10T+ in assets. Security isn't a feature on the roadmap, it's a precondition for the contracts we sign
• We're hiring a Head of Security to own the security function end-to-end. This is the most senior security role at Moment today and you'll drive the strategy, build the program, hire the team, sit in front of customer security organizations, and own the answers
• DRI the security program. Application security, cloud infrastructure security, identity and access management, vulnerability management, detection, and incident response. Set the standards and run the operations
• Scale security programs. Be comfortable facing off with top-tier RIAs, broker-dealers, and global bank security teams. You'll lead those conversations end-to-end
• Own compliance and regulatory posture. SOC 2, plus regulatory baselines relevant to broker-dealers and institutional financial infrastructure. Run audits, manage the Trust Center, and partner with Legal and Compliance as we expand into new asset classes and jurisdictions
• Be the calm in incidents. When something breaks, you run the room, make the call, communicate to clients, and write the postmortem. Customers buy security leaders, not security tools