Remote Security Governance Partner

Envestnet; Berwyn (PA); Hybrid; USD 138,000 - 170,000; Full time

Job summary

Envestnet seeks an experienced cybersecurity governance professional to lead risk assessments, policy development, and regulatory compliance across the organization. The role partners with Security Operations, Legal, Privacy, and HR to strengthen controls, oversight, and incident response.

You will drive human risk governance, insider threat investigations, and AI governance initiatives while maintaining alignment with industry standards (NIST, CIS, SOC) and client expectations.

Qualifications

• Experience in regulated financial services environment with knowledge of cybersecurity controls, data protection and AI risk considerations.
• Familiarity with NIST CSF, NIST SP 800-53, NIST AI RMF, SOC 1/SOC 2, CIS Controls, SEC Reg S-P and privacy requirements.
• Strong cross-functional communication and ability to translate risk concepts for technical and non-technical audiences.

Responsibilities

• Provide Security Governance support companywide and align technology decisions with business strategy and regulatory requirements.
• Develop and maintain cybersecurity policies, standards, guidelines and procedures to ensure compliance.
• Collaborate with cross-functional teams to ensure security controls are understood and managed.
• Coordinate with Legal and compliance to enforce data privacy laws and disclosures.
• Establish and maintain framework and roadmap for Security Governance documentation.
• Define risk tolerance and construct risk scenarios with Cyber Security and business partners.
• Lead insider risk investigations and ensure proper escalation to Legal and HR.
• Translate regulatory requirements into practical control assessments and remediation tracking.
• Support evidence collection for audits and customer due diligence, documenting findings clearly.
• Develop role-based security awareness content and training to foster responsible behavior.
• Track metrics and recommend improvements to assurance processes.
• Assess AI/ML systems risk, including prompt injection and data exfiltration, per NIST AI RMF and ISO 42001.

Skills

Security governance

Risk management

Regulatory compliance

Communication

AI governance risk

Education

Bachelor's degree in information security or related field

CISSP/CISM/CRISC/CISA or GIAC certification

Tools

Azure

AWS

Job description

Envestnet seeks an experienced cybersecurity governance professional to lead risk assessments, policy development, and regulatory compliance across the organization. The role partners with Security Operations, Legal, Privacy, and HR to strengthen controls, oversight, and incident response.

You will drive human risk governance, insider threat investigations, and AI governance initiatives while maintaining alignment with industry standards (NIST, CIS, SOC) and client expectations.