Information Security & Risk Director - YOD

Envestnet; Raleigh (NC); Remote; USD 160,000 - 200,000; Full time

Job summary

An established industry player is seeking an Information Security & Risk Director to lead efforts in protecting customer data and managing technology risks. In this strategic role, you will develop and maintain security policies, implement risk management programs, and ensure compliance with regulatory standards. This remote position offers the opportunity to make a significant impact in the financial sector, overseeing cybersecurity policies and collaborating on data privacy initiatives. Join a forward-thinking company that values innovation and leadership in safeguarding sensitive information.

Benefits

Health Benefits

401K Match

Bonuses

Wellness Programs

Qualifications

• 15+ years in senior security leadership, preferably in financial or fintech sectors.
• Experience with security frameworks like NIST, ISO, SOC 2, and PCI.

Responsibilities

• Develop and maintain security policies based on NIST 800.53 and ISO 27001.
• Implement enterprise risk management programs and oversee risk assessments.

Skills

Cybersecurity Policies

Risk Management

Compliance Standards

Leadership Skills

Communication Skills

Strategic Planning

Education

Bachelor's Degree

Master's Degree

Tools

NIST 800.53

ISO 27001

SOC 2

PCI

Job description

Information Security & Risk Director - YOD

Join to apply for the Information Security & Risk Director - YOD role at Envestnet

Job Overview

Envestnet is seeking a Director, Information Security - YOD to join our Yodlee department. This is a remote role with occasional travel to our Raleigh, NC office.

Since 1999, Envestnet has been transforming financial advice through innovative technology, insights, and asset management solutions. We serve the wealth management industry, supporting trillions in assets and over a hundred thousand financial advisors. Our platform is relied upon by major banks, wealth management firms, and RIAs to drive growth, productivity, and better client outcomes.

Strategy & Vision

• Deliver industry-leading wealth management platform with advanced data and insights
• Leverage scale to meet client needs comprehensively
• Enable holistic advice through connected technology

Role Summary

The Director of Information Security & Risk reports to the Principal Director of Information Security. The role involves leading efforts to protect customer data, manage technology risks, and ensure compliance with regulatory standards. You will oversee cybersecurity policies, risk assessments, audits, and the Information Security Management System (ISMS).

Key Responsibilities

• Governance: Develop and maintain security policies based on NIST 800.53, ISO 27001, and other standards. Lead training and ensure compliance across the organization.
• Risk Management: Implement enterprise risk management programs, define risk appetite, and oversee risk assessments and mitigation strategies.
• Audits: Coordinate with regulators and auditors, oversee third-party risk management, and ensure compliance with standards like SOC 2, PCI, and privacy laws.
• ISMS: Manage security controls, develop metrics for effectiveness, collaborate on data privacy initiatives, and stay updated on emerging threats.

Qualifications

• Bachelor’s degree in relevant field; Master’s preferred
• 15+ years in senior security leadership, preferably in financial or fintech sectors
• Experience with security frameworks (NIST, ISO, SOC 2, PCI)
• Professional certifications (CISSP, CISM, CISA, etc.)
• Strong leadership, communication, and strategic planning skills

Benefits & Compensation

• Salary Range: $160,000 - $200,000 annually
• Health benefits, 401K match, bonuses, and various wellness programs