Head of Risk & Security

Responsibilities

• Mature and execute Akoya’s enterprise risk management (ERM) framework
• Lead third-party risk management across fintech partners, vendors, and service providers
• Lead day-to-day execution of cybersecurity programs across product, infrastructure, and corporate environments
• Operationalize secure-by-design principles across SDLC
• Oversee vulnerability management, penetration testing, and incident response
• Own operational execution of SOC 2 Type II and other certifications
• Ensure alignment with NIST, ISO 27001/27002, GLBA, SOX, and PCI
• Lead and mentor security engineers, risk analysts, and IT personnel
• Interface with security and risk leaders at major financial institutions and fintech clients

Requirements

• 12+ years in enterprise risk, cybersecurity, or information security
• 5+ years leading risk/security teams in fintech, SaaS, or regulated environments
• Experience building or scaling security programs in startup or high-growth organizations
• Deep cloud security expertise with AWS
• Hands-on knowledge of Zero-trust architecture, Secure SDLC, Threat modeling, and Incident response
• Demonstrated ownership of SOC 2 and regulatory audits
• Experience working with both regulated financial institutions and API-based SaaS platforms

Preferred Qualifications

• Experience in open banking or open finance ecosystems
• Familiarity with FDX standards and OAuth/OIDC-based authentication models
• Certifications such as CISSP, CISM, or CRISC
• Experience briefing executives or board-level stakeholders

About the Company

Akoya is an API-based network backed by major financial institutions that creates a safer and more transparent way for people to safely send their personal financial data to third-party financial apps.