Head of Security

Moment Technology•New York, NY

3d•Onsite

About The Position

Moment runs mission-critical trading and data infrastructure for some of the largest financial institutions in the world. Our platform processes order flow, market data, and portfolio state for clients managing $10T+ in assets. Security isn't a feature on the roadmap, it's a precondition for the contracts we sign. We're hiring a Head of Security to own the security function end-to-end. This is the most senior security role at Moment today and you'll drive the strategy, build the program, hire the team, sit in front of customer security organizations, and own the answers.

Requirements

Deeply technical. You can read code, reason about modern cloud architectures (AWS, Kubernetes), threat-model real systems, and ship security tooling yourself when the moment calls for it.
Experienced running a security program at a fintech, trading firm, or financial infrastructure company, somewhere where the stakes were real and the regulatory bar was high.
Comfortable in front of senior client security teams. You've cleared enterprise security reviews at major institutions and can hold the conversation at the architecture level.
A builder of the function, not a steward. This is a 0-to-1 leadership role, not a manager-of-existing-team role.

Nice To Haves

Prior experience at a broker-dealer, market maker, fund administrator, or core fintech infrastructure provider.
SOC 2 Type 2 audit experience as the lead or co-lead.
Background in security engineering: CSPM, IAM, AppSec, detection engineering, or incident response with real shipped work, not just oversight.

Responsibilities

DRI the security program. Application security, cloud infrastructure security, identity and access management, vulnerability management, detection, and incident response.
Set the standards and run the operations.
Scale security programs.
Be comfortable facing off with top-tier RIAs, broker-dealers, and global bank security teams. You'll lead those conversations end-to-end.
Own compliance and regulatory posture. SOC 2, plus regulatory baselines relevant to broker-dealers and institutional financial infrastructure.
Run audits, manage the Trust Center, and partner with Legal and Compliance as we expand into new asset classes and jurisdictions.
Be the calm in incidents. When something breaks, you run the room, make the call, communicate to clients, and write the postmortem.