Head of Security
Location: United States
Reports to: CTO
Employment: Full-time
Our client is building a modern, API-first bank designed for the global economy, connecting traditional banking infrastructure with public blockchain and onchain payment rails. The platform will support traditional payment networks including Fedwire, ACH, FedNow, RTP, and SWIFT, alongside FX, treasury management, and bank-issued stablecoin capabilities.
Seeking a hands-on Head of Security to build and lead the company's information security function from the ground up. This is a founding-team-level role with significant ownership and autonomy, with a natural path toward CISO as the organization scales.
Key Responsibilities
- Own security for the bank's critical money movement infrastructure, including stablecoin mint/redeem flows, custody, key management, transaction signing, and sanctions/asset-freeze controls.
- Build and automate the technical security controls supporting SOC 2, FFIEC, and NIST 800-53 requirements.
- Lead end-to-end incident response, including detection, escalation, on-call processes, post-incident reviews, and security runbooks.
- Drive application and supply-chain security, including secure SDLC, secrets management, dependency management, and CI/CD security.
- Establish identity and access management practices centered around least privilege, JIT access, approvals, auditability, and periodic access reviews.
- Own third-party/vendor security assessments and risk reviews.
- Help secure the underlying AWS/Terraform infrastructure, including cloud guardrails, gated releases, observability, and disaster recovery.
- Leverage AI and automation to eliminate manual security and compliance processes wherever possible.
Ideal Background
- 7+ years of experience in security engineering, cloud security, detection/response, or a closely related discipline.
- Strong AWS cloud security experience, including IAM, organization-level guardrails, Terraform, and least-privilege architecture.
- Proven experience securing high-value financial infrastructure, ideally within payments, banking, crypto, exchanges, custody, or similar environments.
- Strong threat-modeling capabilities and the ability to communicate technical security decisions clearly to executives, auditors, and regulators.
- Hands-on experience with AI-assisted development/coding tools and a strong automation mindset.
- Excellent written communication skills, particularly around security decisions, control narratives, and incident reviews.
Nice-to-Haves
- Experience with crypto custody, MPC, HSMs, wallet infrastructure, or key ceremonies.
- Experience operating in regulated/audited environments involving SOC 2, FFIEC, NIST 800-53, or bank examinations.
- Rust or smart-contract experience/literacy.
- Experience with stablecoins, blockchain infrastructure, or onchain payments.