Security Governance Leader — Remote

Envestnet; Missouri; Hybrid; USD 138,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Paid time off

401k match

Parental leave

Education reimbursement

Disability coverage

Mental health

Job summary

Envestnet is seeking an Enterprise Cybersecurity professional to strengthen governance and assurance programs across the organization. You’ll work with Security Operations, Legal, Privacy, Compliance, and business leaders to assess risks and shape controls that protect client data.

In this role you’ll design and maintain a comprehensive cybersecurity framework, lead insider risk initiatives, coordinate investigations, and ensure regulatory readiness.

Qualifications

• Experience in regulated financial services with cybersecurity controls.
• Familiarity with NIST CSF, NIST SP 800-53, NIST AI RMF, SOC 1/SOC 2, CIS Critical Security Controls, SEC Regulation S-P, and privacy requirements.
• Strong cross-functional communication and analytical skills; ability to translate risk concepts for technical and non-technical audiences.
• Ability to produce clear assessment summaries, evidence requests, findings and remediation tracking materials.

Responsibilities

• Provide Security Governance support across the company.
• Develop and maintain cybersecurity policies, standards, guidelines and procedures to ensure regulatory compliance.
• Collaborate with cross-functional teams to ensure security controls are understood and managed.
• Coordinate with Legal and compliance to implement data privacy requirements.
• Establish and maintain Security Governance documentation roadmap.
• Define risk tolerance and construct risk scenarios with Cyber Security and business partners.
• Lead insider risk investigations and coordinate with Legal, HR and executives.

Skills

Security governance

Risk assessment

Regulatory compliance

Incident response

AI governance

Education

CISSP/CISM/CRISC/CISA certification

Job description

Envestnet is seeking an Enterprise Cybersecurity professional to strengthen governance and assurance programs across the organization. You’ll work with Security Operations, Legal, Privacy, Compliance, and business leaders to assess risks and shape controls that protect client data.

In this role you’ll design and maintain a comprehensive cybersecurity framework, lead insider risk initiatives, coordinate investigations, and ensure regulatory readiness.