Director, Information Security

As
** Director of Information Security
** at Voyant, you will be the senior, hands-on owner of Voyant’s information security and governance programs. This role is responsible for
* directing security outcomes*, not managing a large team. You will work closely with the CTO, Director of Compliance, IT, and
** Ops
* * to ensure Voyant’s internal operations and SaaS platforms meet high standards for security, audit readiness, and customer trust.
* ** Microsoft Purview
** configuration for Data Loss Prevention (DLP), sensitivity labels, and information governance
* Collaboration with IT and Compliance to align technical controls with policy requirements
* Help administer and maintain Voyant’s
** Jump Cloud environment**, including:  + User and device management  + SSO application integrations  + Access control and lifecycle processes
* Collaborate with IT on endpoint, identity, and SaaS security best practices.
* Assist IT with select operational tasks where security expertise is required (e.g., networking, firewall configuration).
* Maintain and periodically test
** incident response plans and procedures**.
* Coordinate response activities in the event of a security incident, ensuring clear communication and recovery of critical services.
* Work with Voyant’s MSP and security vendors for intrusion detection and vulnerability management, including reviewing alerts and reports.
* Proven experience in
** information security, cybersecurity, and IT audit execution**.
* Strong, hands-on experience with
** SOC 2 Type II
** audits.
* Practical knowledge of security frameworks and standards (e.g.,
** NIST, ISO 27001, CIS**).
* Experience maintaining and authoring
** security policies and procedures**.
* Experience with
** Microsoft 365 security tooling**, including Purview or comparable DLP / information governance platforms.
* Familiarity with
** identity and access management
** platforms (e.g., Jump Cloud or similar).
* Experience working closely with IT,
** Ops**, and Engineering teams.
* Comfort operating as a senior
** individual contributor
** who owns outcomes end-to-end.
* Excellent written and verbal communication skills, especially with auditors and customers.
* Experience automating or streamlining GRC and audit workflows.
* Familiarity with
** AWS security services**, including WAF, Security Hub, Guard Duty, Shield, ALB, EC2, S3, RDS, and VPC.
* Exposure to
** LLM-assisted workflows
** for governance, documentation, or security operations.
* IT systems or network administration background.
* Relevant certifications (CISSP, CISM, CISA, or equivalent).
* Flex Time or Paid Time Off and Sick Time Off
* 401K – 6% Employer Match
* Medical, Dental, Vision – HDHP or PPO
* HSA – Employer contribution (HDHP only)
* Volunteer Time Off
* Career Development / Recognition
* Fitness Reimbursement
* Hybrid Work Schedule Asset Mark  is a fast-growing financial technology company changing the game for advisors and their clients. If you are searching for a challenging, rewarding, and evolving career, you have come to the right place.  We offer competitive salaries, full benefits, and excellent opportunities for growth.
#J-18808-Ljbffr