Security Governance Director

The application window will close November 10th, 2026.

The primary work location for this role is remote.

Envestnet is an adaptive

Wealth

Tech company that is redefining the future of wealth management byhelpingadvisors meet the moment with its comprehensive technology, actionable insights, and industry leading support.

Backed byover
25 years of experience and approximately $7.0 trillion in platform assets, Envestnet is trusted by over one third of financial advisors across leading banks, wealth managers, brokerages, and RIAs.

For a deeper look at how Envestnet is shaping the future of financial advice, visit

The Security Governance team plays a critical role in protecting and enabling Envestnet's wealth management technology platform by embedding security, risk management, and regulatory compliance into the fabric of the business. Partnering closely with engineering, product, cloud, data, HR, and compliance teams, the group develops security architecture, governance frameworks, and resilient controls that safeguard critical financial systems while helping teams innovate quickly and securely.

What sets this team apart is its forward-looking approach to security, leveraging automation and AI to modernize risk management, strengthen customer trust, and ensure secure adoption of emerging technologies.

Responsible for ensuring that technology decisions align with business strategy, regulatory requirements and client expectations. Encompasses administration of a strategic and comprehensive cybersecurity framework. Identifies, assesses and mitigates technology and information security risks to protect sensitive financial and client data. Establishes policies, controls and oversight to meet regulatory standards for the financial services and wealth management industry. Enables the company to operate securely, responsibly and at scale while maintaining trust with advisors, partners and regulators.

• Provides Security Governance consultation and direction company-wide.
• Understands and articulates cybersecurity, technology and information security risks and appropriate controls to all levels of the organization.
• Serves as subject matter expert on security controls and requirements, consulting with and advising business leaders on all aspects of application and compliance.
• Ensures performance of risk assessments on business applications, products, systems and processes to verify compliance with company and regulatory requirements.
• Drives all aspects of risk assessment, analysis and documentation, including:
• Scenario derivation,
• Current and anticipated risk profile analysis,
• Avoidance / mitigation planning,
• Residual risk determination.
• Ensures processes are in place to both reduce risk likelihood and impact.
• Serve as a senior individual contributor and strategic security advisor, helping position security as a differentiating capability that strengthens customer trust, supports growth, and enables Envestnet's products and services.
• Partner with product management, sales, legal, technology, compliance, and client-facing teams to translate security requirements, client expectations, and emerging risks into practical guidance, product direction, and service-specific commitments.
• Develop client-facing security materials and market-ready narratives that explain enhanced product and service capabilities, including AI-enabled offerings, emerging technology risks, and post-quantum cryptography readiness.
• Advise on security capabilities, product controls, client commitments, and assurance responses that support sales opportunities, client due diligence, product adoption, and long-term customer confidence.
• Develop metrics and executive-ready reporting that connect security outcomes to customer trust, business enablement, client retention, product adoption, and growth opportunities.
• Provide senior management with concise updates on client security engagement, customer trust trends, enhanced capability enablement, key risks, decision points, and contributions to growth, retention, and product adoption.

• Candidates should demonstrate the relevant experience, skills, and capabilities needed to successfully perform in the role. Relevant experience may be gained through current responsibilities, prior roles, project work, leadership opportunities, or other comparable experiences.
• Experience developing client-facing security collateral, RFP responses, security…