Head of Security

Head of Security Build the future of investment management with us The infrastructure managing $300 trillion in assets was built in the 90s. Now, all of it is up for grabs. The winner of the AI era of investment management will be a $100B+ company. We intend to be that company. To get there, we're assembling the most talent-dense startup in New York. We hire people who are 1) exceptional, 2) allergic to anything that's not exceptional, and 3) recruiters of other exceptional people. We also have no tolerance for brilliant jerks. We run lean by design. We work with a select group of the largest financial institutions in the world, go incredibly deep with each, and sit in the flow of trillions of dollars. We hire fewer people, ask each to own the outcome, and pay on impact - not tenure or experience. Moment is not for everyone. The standards are unreasonably high. The pace is intense. And there is no playbook. In return: the best work of your career, building a generational company. About Moment Moment is the AI operating system for investment management, built for the world's largest wealth firms and fintechs. Moment works with firms managing more than $10 trillion in client assets and is backed by Index, a16z, and Lightspeed. Moment was founded by former quants from Citadel and Jane Street and is based in NYC.

The Role Moment runs mission-critical trading and data infrastructure for some of the largest financial institutions in the world. Our platform processes order flow, market data, and portfolio state for clients managing $10T+ in assets. Security isn't a feature on the roadmap, it's a precondition for the contracts we sign. We're hiring a Head of Security to own the security function end-to-end. This is the most senior security role at Moment today and you'll drive the strategy, build the program, hire

the team, sit in front of customer security organizations, and own the answers. What you’ll do DRI the security program. Application security, cloud infrastructure security, identity and access management, vulnerability management, detection, and incident response. Set the standards and run the operations. Scale security programs. Be comfortable facing off with top-tier RIAs, broker-dealers, and global bank security teams. You'll lead those conversations end-to-end. Own compliance and regulatory posture. SOC 2, plus regulatory baselines relevant to broker-dealers and institutional financial infrastructure. Run audits, manage the Trust Center, and partner with Legal and Compliance as we expand into new asset classes and jurisdictions. Be the calm in incidents. When something breaks, you run the room, make the call, communicate to clients, and write the postmortem. Customers buy security leaders, not security tools. You’re a good fit if you have Deep technical skills. You can read code, reason about modern cloud architectures (AWS, Kubernetes), threat-model real systems, and ship security tooling yourself when the moment calls for it. Experience in running a security program at a fintech, trading firm, or financial infrastructure company, somewhere where the stakes were real and the regulatory bar was high. Confidence in front of senior client security teams. You've cleared enterprise security reviews at major institutions and can hold the conversation at the architecture level. A builder of the function mentality. This is a 0-to-1 leadership role, not a manager-of-existing-team role. Even better if you have Prior experience at a broker-dealer, market maker, fund administrator, or core fintech infrastructure provider. SOC 2 Type 2 audit experience as the lead or co-lead. Background in security engineering: CSPM, IAM, AppSec, detection engineering, or incident response with real shipped work, not just oversight.