Chief InfoSec & IT Leader — Equity + Unlimited PTO

Willow Wealth Inc.; New York (NY); Presencial; USD 215 000 - 230 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Equity

Health, dental & vision coverage

Unlimited PTO

401k match

Commuter benefit

Life insurance

Wellness stipend

Resumo da oferta

Willow Wealth Inc. in New York City is seeking a hands-on Head of Information Security & IT to lead cyber risk, IT, and security operations across US and international offices.

You will report to the General Counsel and own security programs, vendor contracts, and technology strategy. The role demands extensive experience in regulated environments, incident response, and platform security (AWS, Azure, M365).

Qualificações

• Bachelor's degree or equivalent experience; CISSP, CISM, or a cloud security certification preferred.
• 7+ years in information security and IT, including leadership at a regulated firm such as a broker-dealer, RIA, bank, or fintech.
• Track record of leading real security incidents end to end, including notification decisions.
• Experience reporting security posture to a board or executive committee in clear language.
• Hands-on experience with cloud, identity, endpoint, and data loss prevention.
• Experience running IT hands-on with a small team and managing vendors.
• Experience leading a SOC 2 audit or selecting a managed detection and response provider is a plus.
• Experience supporting offices outside the US is a plus.

Responsabilidades

• Information Security Program & Compliance - own the security program, policies, and cyber risk, and keep the firm exam- and audit-ready under SEC and FINRA expectations, including Regulation S-P and S-ID
• Board & Leadership Reporting - report on security posture to the board quarterly and to leadership monthly
• Incident Response - lead incident response end to end, including notification decisions with Legal and Compliance, and run an annual tabletop exercise with the executive team
• Vulnerability Management - oversee vulnerability management, including continuous automated penetration testing, with remediation SLAs by severity
• IT Leadership - run IT hands-on with our IT team, and set strategy, standards, and budget for IT and A/V across our offices in New York and abroad
• Partner with Engineering on application security, setting the standard and verifying it is met
• Own the IT and security stacks, vendors, contracts, and renewals, and run security reviews for new and critical vendors
• Oversee our core platforms: AWS for our investor platform, Microsoft Azure and Microsoft 365 for corporate IT, and the security layer around them, including identity and Zero Trust access, device management, managed detection and response, data loss prevention, email and web protection, application security scanning, and account takeover protection

Conhecimentos

Information security leadership

Incident response

Board reporting

Vulnerability management

Vendor management

Cloud security

Zero Trust security

MDR/ SOC2 prep

Formação académica

Bachelor's degree or equivalent

CISSP

CISM

Cloud security certification

Ferramentas

AWS

Azure

Microsoft 365

Identity & access management

Descrição da oferta de emprego

Willow Wealth Inc. in New York City is seeking a hands-on Head of Information Security & IT to lead cyber risk, IT, and security operations across US and international offices.

You will report to the General Counsel and own security programs, vendor contracts, and technology strategy. The role demands extensive experience in regulated environments, incident response, and platform security (AWS, Azure, M365).