Cybersecurity Architect

Envestnet; États-Unis; À distance; USD 184 000 - 230 000; Plein temps

Avantages offerts par ce poste

Medical insurance

401k match

Paid PTO

Education reimbursement

Résumé du poste

Envestnet is seeking an enterprise security architect to lead the design and implementation of security infrastructure, governance, and risk management across a wealth-tech platform. You will drive security architecture standards, AI-enabled risk strategies, and automation across teams including cloud, data, and product.

The role emphasizes leading as a senior individual contributor, leveraging Power BI for risk insights, and aligning with industry standards such as NIST and ISO.

Qualifications

• Experience in cybersecurity architecture within regulated environments.
• Hands-on with security automation tooling and scripting (Python or similar).
• Experience integrating automation and AI into GRC functions.

Responsabilités

• Define and maintain security architecture and infrastructure across systems.
• Collaborate with IT, security, and third parties to address global security needs.
• Lead secure-by-design practices across SDLC and supply chain.

Connaissances

Cybersecurity architecture

Security automation

Python scripting

Cloud IaC

AI security governance

Power BI

Leadership

Formation

CISSP-ISSAP or CCSP preferred

Outils

Power BI

Description du poste

Description

The application window will close October 1st, 2026

Job Location

The primary work location for this role is remote.

About Envestnet

Envestnet is an adaptiveWealthTechcompany that isredefining the future of wealth management by helpingadvisors meet the moment with its comprehensive technology, actionable insights, and industry leading support. Backed byover25 years of experience and approximately$7.0 trillionin platform assets, Envestnet is trusted by over one third of financial advisors across leading banks, wealth managers, brokerages, and RIAs.

For a deeper look at how Envestnet is shaping the future of financial advice, visit www.envestnet.com.

The Team You’ll Join

The Security Governance team plays a critical role in protecting and enabling Envestnet’s wealth management technology platform by embedding security, risk management, and regulatory compliance into the fabric of the business. Partnering closely with engineering, product, cloud, data, HR, and compliance teams, the group develops security architecture, governance frameworks, and resilient controls that safeguard critical financial systems while helping teams innovate quickly and securely. What sets this team apart is its forward-looking approach to security, leveraging automation and AI to modernize risk management, strengthen customer trust, and ensure secure adoption of emerging technologies.

How You’ll Contribute

• Responsible for the overall architecture and design of security infrastructure, including engineering, implementation, integration and technical services and support. Defines specifications for operating system applications and modifies / maintains existing applications. Designs, integrates and implements infrastructure including hardware, software and various configurations. Designs and deploys systems based on business and user requirements. Plans, conducts and directs the analysis of business problems to be solved with automated systems.
• Interfaces daily with IT and security counterparts, clients and third-parties to ensure an overall integrated approach to understanding and meeting global technical and security needs.
• Provides cybersecurity architecture advice and consultation across major program and solution levels.
• Designs and develops new systems, applications and solutions for cyber systems and networks.
• Ensures system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security testing and evaluation.
• Contributes to the creation of cybersecurity architecture principles, standards and patterns, publishing and distributing as appropriate.
• Actively drives the definition of engineering standards and technologies / frameworks and leads associated working groups.
• Provides complex analysis of potential risks to information systems security and recommends innovative solutions.
• Integrates network security controls into an environment to identify risks and reduce their impact.
• Ways of Working — Serve as the enterprise security architect, partnering across teams to define, socialize, and govern security policies, standards, and reference architectures while driving implementation, auditability, and assurance through AI and automation.
• Enterprise Risk, AI GRC & Roadmap Alignment — Define and execute the enterprise security roadmap, advancing automation, identity security, and measurable risk reduction; align security strategy across the Three Lines of Defense, NIST AI RMF, NIST 800-series, and ISO 42001; support customer audits, exams, and assessments with audit-ready evidence; and communicate security posture through KPIs/KRIs.
• AI Security, Data Protection & Governance — Establish and operationalize AI security and risk governance, including security-by-design guardrails, secure patterns for AI-enabled and agentic solutions, and AI data controls (sourcing, access, minimization, and lineage). Define and validate enterprise data security standards for classification, encryption, retention/deletion, DLP, and secrets management in partnership with Data, Cloud, and Platform teams.
• Secure Development, Supply Chain & Third-Party Assurance — Lead secure-by-design practices across the SDLC and software supply chain, including architecture reviews, threat modeling, dependency management, SBOM, vulnerability response, and third-party risk management through onboarding/offboarding, contractual security requirements, SOC report reviews, and continuous monitoring.
• Insider Threat Program — Partner with Security Assurance, HR, Legal, Compliance, 2nd-line risk, and SecOps to establish and mature the enterprise insider threat program, including AI-enabled strategy, policies, playbooks, escalation processes, detection, and response capabilities.

What You’ll Need to Bring

• Candidates should demonstrate the relevant experience, skills, and capabilities needed to successfully perform in the role. Relevant experience may be gained through current responsibilities, prior roles, project work, leadership opportunities, or other comparable experiences.
• Relevant experience in cybersecurity, including experience in an architecture role within a regulated financial services or fintech environment, with deep working knowledge of NIST AI RMF, the NIST 800-series, and the Three Lines of Defense model.
• Hands-on experience with security automation tooling and scripting (Python or similar).
• Proven expertise in leveraging automation and artificial intelligence to enhance Governance, Risk, and Compliance (GRC) functions, including control monitoring, evidence collection, third-party risk assessment, and policy management.
• Demonstrated expertise in cloud architecture and Infrastructure as Code (IaC), enabling the effective design and implementation of controls across both cloud and AI environments.
• Proven experience assessing and managing risk across AI lifecycles, cloud environments, applications, APIs, and data security, including controls related to IAM, network segmentation, encryption and key management, logging and monitoring, secure design, authentication and authorization, secrets management, and data pipelines.
• Experience designing assurance and control validation approaches, including evidence standards, testing cadence, continuous control monitoring, and partnership with incident response and operational resilience teams to define and assess detection, containment, and recovery requirements for critical systems.
• Strong data-driven and leadership capabilities, including proficiency with Power BI or similar BI tools, success leading as a senior individual contributor without direct authority, and the ability to communicate complex security risk concepts clearly to technical and non-technical audiences.
• Certifications such as CISSP-ISSAP, CCSP, or a specialized AI security certification are preferred, or equivalent experience.

Nice-to-Haves

• Industry certifications such as CISSP, CISM, CRISC, CISA, or IAM-related certifications.
• Experience with modern AI GRC and monitoring tools and platforms.
• Background in financial services or other regulated industries.
• Experience governing AI security programs.

Why You’ll Enjoy Working at Envestnet

Help shape the future of WealthTech. At Envestnet you’ll gain hands-on experience and collaborate with some of the industry’s brightest minds to deliver meaningful, innovative solutions that make a real difference.

We value flexibility in how and where work gets done, and we recognize strong performance with meaningful rewards—because your contributions should drive both business success and your own personal growth. If you’re looking for a place where your work has impact, your development is supported, and your contributions are truly valued, Envestnet is where you can build your future.

The opportunity is now!

Sponsorship

This position is not open to candidates requiring visa sponsorship

Our Investment in You

This role offers a base salary range of $184,200 to $230,300. The range listed represents a good-faith estimate of base salary compensation for this position and does not include incentive compensation, equity or benefits. Individual pay will be determined based on factors including, but not limited to, relevant experience, skills, education, certifications, and geographic location, in accordance with applicable pay transparency laws. This role is eligible for an additional incentive component as part of the total rewards package.

We provide a comprehensive suite of benefits - subject to Envestnet's plan eligibility rules - that support your overall well-being including, medical insurance, paid time off (PTO), 401k company match, paid parental leave, education reimbursement, disability coverage and mental health & wellness support. Our investment in you means supporting you professionally, financially, and personally at every stage of your journey with us. Please visit our benefits page on our career site to learn more.

Our Commitment to Inclusion & Belonging

Envestnet is an Equal Opportunity Employer and is committed to creating an inclusive environment for all employees and applicants. We welcome and value individuals of all backgrounds and do not discriminate based on race, color, religion, creed, sex (including pregnancy or related medical conditions), gender identity or expression, sexual orientation, national origin, ancestry, age, disability, genetic information, military or veteran status, citizenship status, or any other status protected by applicable law. We encourage individuals from all backgrounds to apply.

We strive to provide an inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation, please contact us at [e-mail]. Please include your full name, the title of the role you are applying for, and the accommodation necessary to assist you with the recruiting process.

Recruitment Fraud

At Envestnet, safeguarding the trust and safety of job seekers is a top priority. We are aware that scammers may impersonate Envestnet recruiters or create fake job opportunities to deceive candidates. Review the information on our recruitment fraud awareness page to help you recognize and avoid recruitment fraud.