Head of Risk, Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Lead and mature cybersecurity, risk management, and IT governance functions at Akoya, a fintech innovator. Drive execution and team development across diverse operational areas.
Responsibilities:
- Lead and mature Akoya’s cybersecurity, risk management, and IT governance functions
- Serve as the operational backbone of Akoya’s security and risk programs
- Translate strategy into execution and lead a team across security engineering, cyber operations, risk, compliance, and IT
- Mature and execute Akoya’s enterprise risk management (ERM) framework
- Develop and track key risk indicators (KRIs) aligned with business OKRs
- Lead third-party risk management across fintech partners, vendors, and service providers
- Conduct product risk assessments across new open finance capabilities
- Support regulatory readiness related to CFPB Section 1033
- Lead day-to-day execution of Akoya’s cybersecurity program
- Drive continuous improvement of zero-trust cloud architectures (AWS-centric)
- Enhance monitoring, automation, and threat intelligence capabilities
- Own operational execution of SOC 2 Type II and other certifications
- Ensure alignment with NIST, ISO 27001/27002, GLBA, SOX, PCI
- Partner closely with Legal and Product on regulatory interpretation and implementation
- Respond to due diligence inquiries from financial institutions, fintechs, investors, and regulators
- Oversee corporate IT governance in partnership with IT Systems Administrator
- Lead and mentor security engineers, risk analysts, and IT personnel
Requirements:
- 12+ years in enterprise risk, cybersecurity, or information security.
- 5+ years leading risk/security teams in fintech, SaaS, or regulated environments.
- Experience building or scaling security programs in startup or high-growth organizations.
- Deep cloud security expertise (AWS required; multi-cloud a plus).
- Strong hands-on knowledge of:
- Zero-trust architecture
- Secure SDLC
- Threat modeling
- Vulnerability management
- Incident response
- Demonstrated ownership of SOC 2 and regulatory audits.
- Experience working with regulated financial institutions and fintechs or API-based SaaS platforms.
Benefits:
- Akoya offers a highly collaborative, fast-paced, and fun working environment
- Diverse, creative, and driven professionals with expertise in the banking, securities, fintech, and data aggregation industries
- Equal opportunity employer
Similar Jobs
Cybersecurity Research Expert – Offensive Security, Vulnerability Research
Cybersecurity research expert evaluating frontier AI systems’ exploit analyses and vulnerability reasoning. Providing structured feedback and benchmarks for advanced AI security capabilities.
Director, Physical Security
Director building physical and organizational security for Orcrist’s petabyte-scale B2B data intelligence platform. Managing classified-work protection, sites, personnel security, crisis response, vendors, and regulatory compliance.
Security Consultant
CyberArk Conjur Engineer securing secrets management for Atos’s AI-powered digital services. Designing integrations, automation, and operational support across Kubernetes, cloud, and DevSecOps environments.
Identity Security Specialist
Identity Security Specialist securing identity lifecycles, authentication, and IAM controls for Ascension, a nonprofit Catholic healthcare system. Leading modernization, audits, integrations, and Tier 3 support.
Space Systems Security Architect
Lead architect securing satellite, ground, and user systems for Dragonfli Group’s cybersecurity consulting clients. Driving scalable product architecture, integration, compliance, and mission-readiness across commercial space deployments.
Staff Cloud Security Engineer
Staff Cloud Security Engineer hardening AWS infrastructure and CI/CD for Beyond Finance, helping Americans escape crippling debt. Owning Wiz-based cloud security and vulnerability management.
Cybersecurity Co-Founder / CCO
Cybersecurity co-founder owning and scaling a startup with EWOR, a venture builder supporting entrepreneurs through founder coaching, hiring, distribution, and funding.
Infrastructure & Security Engineer
Infrastructure & Security Engineer securing Microsoft 365, Azure, and client environments for Mechanicus, a security-focused managed service provider. Leading incident response, cloud engineering, hardening, and Tier 3 escalations remotely across the US.
Facility Security Officer
Facility Security Officer managing personnel clearances, facility security, and compliance for AppGate's federal Zero Trust cybersecurity platform. Supporting cleared defense programs, audits, and classified information protection.
IT Security Engineer
IT Security Engineer supporting security operations, incident response, and GRC for CONMED, a global medical device company. Contributing to regulated product security, audits, risk tracking, and compliance reporting.
Security Project Manager
Security Project Manager leading Nasstar’s Telecoms Security Act and Ofcom compliance. Validating technical controls, assessing risks, and coordinating regulatory assurance across UK telecoms operations.
AI Security Consultant
AI Security Consultant helping PA Consulting clients secure LLMs, agentic systems and cloud environments. Designing practical controls, threat models and responsible AI-enabled security operations.
Senior Director, Cybersecurity GRC
Senior cybersecurity GRC leader modernizing governance, risk, compliance, and resilience programs at MoneyGram. Scaling automation and global teams for a regulated fintech organization.
Senior Information Security Engineer
Senior Information Security Engineer securing MoneyGram’s cross-border money transfer systems. Implementing detection, incident response, cloud security, vulnerability management, and automation controls.
IT Security Specialist – Identity & Access Management, Migration Consultant
IAM migration consultant leading enterprise authentication modernization from ForgeRock OpenAM to PingOne Advanced Identity Cloud and Microsoft Entra ID. Minimizing disruption through SSO implementation, testing, documentation, and post-migration support.
Residential Physical Security Specialist
Residential security specialist protecting Rocket Companies executives, private residences, and families. Coordinating executive protection assignments and mitigating physical security risks.
Security Engineer Consultant II
Security Engineer Consultant II designing and implementing cloud and application security solutions for Allstate’s insurance business. Supporting DevOps/SecOps, vulnerability management, and secure IaaS/PaaS/SaaS implementations.
Staff Security Engineer – Threat Detection
Staff Security Engineer building AI-powered threat detections and response workflows at Snowflake, a cloud data platform. Improving detection coverage, automation, and security analytics at global scale.
Security Director
Director of Security protecting Zcash wallets, protocols, and cryptographic infrastructure at ZODL. Leading incident response, audits, security policy, and proactive vulnerability mitigation across a distributed global team.
Senior Datadog Security – Observability Engineer
Senior Datadog engineer scaling detection engineering and security observability for Keeper Security’s cybersecurity platform. Building SIEM rules, telemetry pipelines, dashboards, and monitoring across AWS environments.