Security Governance Lead — Risk & Compliance

Envestnet; Raleigh (NC); Hybrid; USD 139,000 - 173,000; Full time

Job summary

Envestnet seeks an experienced Security Risk professional to join the Enterprise Cybersecurity team in a hybrid role, in Berwyn, PA or Raleigh, NC. You’ll lead governance, risk assessments, and controls across applications, cloud platforms, and third‑party integrations to protect client data.

Collaborating with Legal, Compliance, and Risk & Assurance, you’ll translate findings into business risk, deliver dashboards, and help shape a proactive security program in wealth management.

Qualifications

• 7+ years in information security or technology risk.
• Experience with investment banking or wealth management.
• Three Lines of Defense experience.
• Experience with Jira-based risk workflows or enterprise GRC.
• Cloud security experience.
• Experience with generative AI governance.
• Certifications such as CISSP, CISM, CCSP.

Responsibilities

• Provide security governance support companywide.
• Develop and maintain cybersecurity policies, standards, guidelines and procedures.
• Collaborate with cross-functional teams to ensure security controls are understood and managed.
• Coordinate with Legal and compliance functions for data privacy and disclosure.
• Establish and maintain Security Governance documentation framework and roadmap.
• Work with Cyber Security team to define risk tolerance and risk scenarios.
• Ensure risk scenarios reflect business context and threats.
• Perform Security Risk Assessments across applications, infrastructure, cloud, and integrations.
• Evaluate control effectiveness and support remediation planning.
• Operate risk monitoring tools to detect changes in risk posture and remediation needs.
• Own the lifecycle of identified risks and produce risk reporting and dashboards.

Skills

Security governance

Risk assessment

Regulatory compliance

NIST CSF

Stakeholder communication

Cloud security

AI governance

KPIs & dashboards

GRC tooling

Education

CISSP

CISM

CCSP

Tools

Jira

GRC platforms

Vulnerability management

Cloud posture monitoring

Configuration monitoring

AI governance tooling

Job description

Envestnet seeks an experienced Security Risk professional to join the Enterprise Cybersecurity team in a hybrid role, in Berwyn, PA or Raleigh, NC. You’ll lead governance, risk assessments, and controls across applications, cloud platforms, and third‑party integrations to protect client data.

Collaborating with Legal, Compliance, and Risk & Assurance, you’ll translate findings into business risk, deliver dashboards, and help shape a proactive security program in wealth management.