Chief Information Security Officer

Cresset; Denver (CO); Hybrid; USD 180,000 - 320,000; Full time

Job summary

Cresset is seeking a Managing Director, Information Security to lead the firm’s information security program and strategy in a hybrid office setting in Denver. You will partner with Technology, Compliance, Legal, HR, and business leaders to balance security with business enablement, risk management, and regulatory obligations.

The role requires 10+ years in information security, 5+ years leading teams, and deep expertise in IAM, cloud security, and data protection within wealth management or

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field; advanced degree preferred.
• 10+ years of progressive information security experience.
• 5+ years leading enterprise information security teams in a regulated industry.
• Experience maturing an enterprise information security program in wealth management or financial services.
• Strong knowledge of IAM, cloud security, data protection, and regulatory requirements.

Responsibilities

• Develop and execute the enterprise information security roadmap aligned with business priorities.
• Lead IAM, data protection, and network security initiatives across cloud and on‑premises environments.
• Manage security budget, vendors, and strategic partnerships.
• Oversee incident response, vulnerability management, and threat detection programs.
• Provide executive reporting on risk, program maturity, and KPIs.
• Foster a collaborative security culture and coach security engineers.

Skills

Security leadership

IAM

Cloud security

Risk management

Stakeholder communication

Budget management

Education

Bachelor's degree in Information Security or related field

Advanced degree preferred

Tools

Okta

SailPoint

CyberArk

Microsoft Entra ID

SIEM / SOAR

Job description

Cresset is seeking a Managing Director, Information Security to lead the firm’s information security program and strategy in a hybrid office setting in Denver. You will partner with Technology, Compliance, Legal, HR, and business leaders to balance security with business enablement, risk management, and regulatory obligations.

The role requires 10+ years in information security, 5+ years leading teams, and deep expertise in IAM, cloud security, and data protection within wealth management or