Lead Security Governance Partner - Identity

Envestnet; All (MO); Remote; USD 139,000 - 173,000; Full time

Job summary

Envestnet is urgently seeking a Security Governance leader to align technology decisions with business strategy, regulatory requirements, and client expectations. You will administer a strategic cybersecurity framework, assess risks, and implement controls to protect sensitive financial and client data.

You will partner with Legal, Compliance, and IT leaders to ensure proper risk coverage, enforce data privacy, and drive enterprise-wide governance programs across cloud and on-prem environments.

Qualifications

• Experience leading UAR/access certification and lifecycle governance.
• Advanced knowledge of AD, Entra ID, Okta, and IGA platforms.
• Strong ability to automate with PowerShell, APIs, and dashboards.
• Ability to communicate risk through executive-ready reporting and narratives.

Responsibilities

• Provide Security Governance support and advice companywide; develop and maintain cybersecurity policies and procedures.
• Collaborate with cross-functional teams to document and manage security controls.
• Coordinate with Legal and compliance functions on data privacy compliance.
• Establish and maintain Security Governance documentation framework and roadmap.
• Define risk tolerance and construct risk scenarios across the organization.
• Lead identity governance initiatives, translating regulatory requirements into controls.
• Design and manage enterprise access review campaigns and JML control requirements.
• Provide governance for directory/federation environments and IGA program leadership.
• Set direction for automation and cloud identity governance, including PAM and AI governance.
• Lead triage and remediation governance for identity-related threats with senior stakeholders.

Skills

Identity governance

AD/Entra ID/Okta

RBAC/ABAC

PowerShell automation

Regulatory risk governance

Executive reporting

Tools

PowerShell

APIs

Dashboard tooling

Automation platforms

Job description

Description

The application window will close November 15th, 2026.

Job Location

This is a remote role.

About Envestnet

Envestnet is an adaptive WealthTech company that is redefining the future of wealth management by helping advisors meet the moment with its comprehensive technology, actionable insights, and industry leading support. Backed by over 25 years of experience and approximately $7.0 trillion in platform assets, Envestnet is trusted by over one third of financial advisors across leading banks, wealth managers, brokerages, and RIAs.

For a deeper look at how Envestnet is shaping the future of financial advice, visit www.envestnet.com.

The Team You’ll Join

The Security Governance team plays a critical role in protecting Envestnet’s business, clients, and technology ecosystem by ensuring security, risk, and compliance are woven into every aspect of the organization. Partnering closely with leaders across Technology, Legal, Compliance, Risk, and business teams, the group develops the frameworks, policies, and controls that safeguard sensitive financial and client data while enabling innovation and growth. From leading identity governance programs across platforms such as Active Directory, Entra ID, Okta, and cloud environments to advancing AI governance, access management, and cyber risk oversight, the team helps build trust, strengthen resilience, and ensure regulatory readiness. What sets this team apart is its unique combination of strategic influence and hands-on impact, shaping enterprise-wide security decisions while driving initiatives that allow Envestnet to operate securely, responsibly, and at scale in an evolving digital landscape.

How You’ll Contribute

Responsible for ensuring that technology decisions align with business strategy, regulatory requirements and client expectations. Encompasses administration of a strategic and comprehensive cybersecurity framework. Identifies, assesses and mitigates technology and information security risks to protect sensitive financial and client data. Establishes policies, controls and oversight to meet regulatory standards for the financial services and wealth management industry. Enables the company to operate securely, responsibly and at scale while maintaining trust with advisors, partners and regulators.

• Provides Security Governance support and advice companywide. Develops, validates, implements and maintains cybersecurity and related policies, standards, guidelines and procedures to ensure compliance with company and regulatory requirements.
• Collaborates with cross-functional teams and leaders to ensure security related controls are understood, documented and managed.
• Coordinates with Legal and across relevant compliance functions to ensure proper implementation of data privacy legislation and disclosure.
• Establishes and maintains the framework and roadmap for Security Governance documentation.
• Works with Cyber Security team members and business partners to define risk tolerance and construct risk scenarios.
• Ensures risk scenarios provide a realistic and relatable view of risks based on business context, system environment and pertinent threats.
• Identity Governance Strategy & Control Leadership — Leads complex identity governance initiatives companywide (standards execution, control validation, remediation strategy, metrics, documentation, roadmap input); translates NIST, SOX/SOC, regulatory, and internal policy requirements into actionable identity controls.
• Access Certification, UAR & Lifecycle Control Design — Designs and leads enterprise access review campaigns (reviewer readiness, evidence standards, escalation paths, quality checks, remediation governance, leadership reporting); defines and validates JML control requirements across HR, directory, application, and IGA processes.
• AD, Entra ID, Okta & IGA Program Leadership — Provides advanced governance oversight for directory/federation environments (role/group governance, RBAC/ABAC, SSO/MFA, conditional access, identity data quality) and leads IGA operational design (certification workflows, access request controls, entitlement models, connector readiness, application onboarding, evidence generation).
• Automation, Cloud, PAM & Non-Human Identity Governance — Sets direction for PowerShell/API/dashboard/workflow automation supporting access analysis, certification readiness, evidence generation and exception monitoring; defines governance expectations for cloud IAM, PAM controls, service accounts, secrets, bots, and AI/agent identities (ownership, review cadence, remediation accountability).
• Identity Threat, Risk & Executive Engagement — Leads triage and remediation governance for identity-related threats and control gaps (excessive access, stale accounts, privilege changes, orphaned identities, high-risk cloud entitlements); partners with audit, risk, compliance, and leadership to communicate control posture and risk-reduction outcomes.
• AI Governance and Risk Management: Assess and secure AI/ML systems, agentic ecosystems, and AI-assisted development across the software lifecycle — including AI platforms (e.g., AWS Bedrock, Claude, Copilot), agent/orchestration frameworks, and RAG/LLM integrations — while identifying and mitigating AI-specific risks such as prompt injection, jailbreaking, data poisoning, and model exfiltration, in alignment with NIST AI RMF and ISO 42001.

What You’ll Need to Bring

• Candidates should demonstrate the relevant experience, skills, and capabilities needed to successfully perform in the role. Relevant experience may be gained through current responsibilities, prior roles, project work, leadership opportunities, or other comparable experiences.
• Demonstrated experience leading UAR/access certification, lifecycle governance, remediation, and control validation/audit evidence activities, backed by advanced working knowledge of AD, Entra ID, Okta, IGA platforms, RBAC/entitlement governance, PAM, cloud identity risk, and non-human identity governance.
• Strong ability to direct, validate, or troubleshoot PowerShell, API, reporting, dashboard, and workflow automation built by engineering teams or automation partners, grounded in practical knowledge of NIST, SOX/SOC, internal control expectations, and risk-based control design.
• Proven ability to lead through influence, mentor team members, manage complex stakeholder relationships, and produce executive-ready reporting and risk narratives.

Nice-to-Haves

• 7+ years of experience in cybersecurity, IAM security, identity governance, access administration, IT risk, or related technology control functions, preferably in a regulated environment.
• Industry certifications (CISSP, CISM, CRISC, CISA, IAM/vendor, or cloud security) and experience contributing to enterprise IGA implementation — application onboarding, connector design, role modeling, or certification automation.
• Background in financial services, wealth management, or other regulated industries, plus experience with AI governance, non-human identity discovery, secrets governance, or cloud identity posture management tools.

Why You’ll Enjoy Working at Envestnet

Help shape the future of WealthTech. At Envestnet you’ll gain hands-on experience and collaborate with some of the industry’s brightest minds to deliver meaningful, innovative solutions that make a real difference.

We value flexibility in how and where work gets done, and we recognize strong performance with meaningful rewards—because your contributions should drive both business success and your own personal growth. If you’re looking for a place where your work has impact, your development is supported, and your contributions are truly valued, Envestnet is where you can build your future.

The opportunity is now!

Sponsorship

This position is not open to candidates requiring visa sponsorship

Our Investment in You

This role offers a base salary range of $138,500 to $173,100. The range listed represents a good-faith estimate of base salary compensation for this position and does not include incentive compensation, equity or benefits. Individual pay will be determined based on factors including, but not limited to, relevant experience, skills, education, certifications, and geographic location, in accordance with applicable pay transparency laws. This role is eligible for an additional incentive component as part of the total rewards package. We provide a comprehensive suite of benefits - subject to Envestnet’s plan eligibility rules - that support your overall well‑being including, medical insurance, paid time off (PTO), 401k company match, paid parental leave, education reimbursement, disability coverage and mental health & wellness support. Our investment in you means supporting you professionally, financially, and personally at every stage of your journey with us. Please visit our benefits page on our career site to learn more.

Our Commitment to Inclusion & Belonging

Envestnet is an Equal Opportunity Employer and is committed to creating an inclusive environment for all employees and applicants. We welcome and value individuals of all backgrounds and do not discriminate based on race, color, religion, creed, sex (including pregnancy or related medical conditions), gender identity or expression, sexual orientation, national origin, ancestry, age, disability, genetic information, military or veteran status, citizenship status, or any other status protected by applicable law. We encourage individuals from all backgrounds to apply. We strive to provide an inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation, please contact us at [email protected]. Please include your full name, the title of the role you are applying for, and the accommodation necessary to assist you with the recruiting process.

Recruitment Fraud

At Envestnet, safeguarding the trust and safety of job seekers is a top priority. We are aware that scammers may impersonate Envestnet recruiters or create fake job opportunities to deceive candidates. Review the information on our recruitment fraud awareness page to help you recognize and avoid recruitment fraud.