Lead Security Governance Partner - Assurance

Description

The application window will close November 1, 2026

Job Location
The primary work location for this role is Berwyn, PA or Remote with either a hybrid work or remote model.

Description

The application window will close November 1, 2026

Job Location
The primary work location for this role is Berwyn, PA or Remote with either a hybrid work or remote model.

Envestnet is an adaptive

Wealth

Tech company that is redefining the future of wealth management byhelpingadvisors meet the moment with its comprehensive technology, actionable insights, and industry leading support.

Backed byover
25 years of experience and approximately $7.0 trillion in platform assets, Envestnet is trusted by over one third of financial advisors across leading banks, wealth managers, brokerages, and RIAs.

For a deeper look at how Envestnet is shaping the future of financial advice, visit

You’ll join Envestnet’s Enterprise Cybersecurity team, partnering closely with Security Operations, Technology, Legal, People & Culture, Privacy, Compliance, and business leaders to strengthen the company’s security governance and assurance programs. The team works across the organization to assess and mitigate technology and information security risks, maintain effective policies and controls, support regulatory and audit requirements, and promote responsible security practices. In this role, you’ll contribute to key initiatives spanning human and insider risk, cybersecurity investigations, control assurance, security awareness, and emerging areas such as AI governance, helping Envestnet operate securely and maintain the trust of its clients, partners, and regulators.

Responsible for ensuring that technology decisions align with business strategy, regulatory requirements and client expectations. Encompasses administration of a strategic and comprehensive cybersecurity framework. Identifies, assesses and mitigates technology and information security risks to protect sensitive financial and client data. Establishes policies, controls and oversight to meet regulatory standards for the financial services and wealth management industry. Enables the company to operate securely, responsibly and at scale while maintaining trust with advisors, partners and regulators.

• Provides Security Governance support and advice company wide.
• Develops, validates, implements and maintains cybersecurity and related policies, standards, guidelines and procedures to ensure compliance with company and regulatory requirements.
• Collaborates with cross-functional teams and leaders to ensure security related controls are understood, documented and managed.
• Coordinates with Legal and across relevant compliance functions to ensure proper implementation of data privacy legislation and disclosure.
• Establishes and maintains the framework and roadmap for Security Governance documentation.
• Works with Cyber Security team members and business partners to define risk tolerance and construct risk scenarios.
• Ensures risk scenarios provide a realistic and relatable view of risks based on business context, system environment and pertinent threats.
• Human Risk Program Design and Governance:
  Support human risk and insider risk governance — including risk assessments, playbooks, and monitoring reviews — in partnership with Security Operations, HR, Legal, Privacy, and Compliance.
• Investigations and Incident Response:
  Lead or coordinate insider threat investigations (fraud, data exfiltration, policy violations, misuse of privileged access), following sound evidentiary and forensic practices and escalating appropriately to Legal, HR, and executive stakeholders.
• Second Line Risk Management and Regulatory Compliance:
  Translate regulatory and…