Head of Security — Fintech & Crypto Infra

Clutch Canada; Miami (FL); Hybrid; USD 210,000 - 250,000; Full time

Benefits offered by this job

Unlimited PTO

Parental Leave

Health, dental, vision insurance

Company laptop & home office equipment

Stipend for commuting and meals

Stock options

Job summary

Crossmint is seeking a Head of Security to build and own the security function as we scale our fintech/crypto infrastructure. This is a player-coach role: set strategy and own the program, stepping in hands-on when needed.

You will oversee security posture across cloud and infrastructure, vendor risk, and regulatory audits (SOC 2 Type II, DORA, MiCA). You will collaborate with Engineering, Compliance, Legal, and People Ops to maintain a strong security culture.

Qualifications

• 8+ years in security leadership or program ownership roles.
• Strong technical fluency in cloud security, application security, and CI/CD security.
• Experience owning a security compliance program end-to-end (SOC 2 Type II preferred).
• Software engineering background or equivalent experience.
• Familiarity with AI/agentic tools and fintech/regulatory contexts.

Responsibilities

• Define and own Crossmint's security strategy, including roadmap, risk posture, and investment decisions.
• Lead hands-on threat modeling, incident response, and security reviews across product and infrastructure.
• Own audit readiness and regulatory compliance, coordinating with auditors and regulators.
• Manage vendor risk reviews for new partners and third-party relationships.
• Develop and mentor security engineers, and communicate risk to leadership clearly.

Skills

Security leadership

Cloud security (AWS)

Application security

CI/CD security

Threat modeling

Incident response

Audit & compliance

Vendor risk management

Regulatory knowledge

Education

Software engineering degree or strong equivalent

Tools

AWS

Security tooling

Job description

Crossmint is seeking a Head of Security to build and own the security function as we scale our fintech/crypto infrastructure. This is a player-coach role: set strategy and own the program, stepping in hands-on when needed.

You will oversee security posture across cloud and infrastructure, vendor risk, and regulatory audits (SOC 2 Type II, DORA, MiCA). You will collaborate with Engineering, Compliance, Legal, and People Ops to maintain a strong security culture.