Wealth Management-Richardson-Vice President-Security Engineering

Role Overview

The Head of Technology Risk for Wealth Management is a critical senior leadership position responsible for defining, implementing, and overseeing the comprehensive information security and cybersecurity risk posture specifically within the Wealth Management business. This role is pivotal in balancing commercial objectives with robust security controls, ensuring the division's resilience against an evolving threat landscape, and protecting client assets and highly sensitive personal data.

This leader will directly manage and provide strategic direction to teams responsible for Governance, Risk & Compliance (GRC), Application Security & Advisory, and Product Security functions within Wealth Management. Crucially, this role also involves the oversight and guidance of embedded Technology Risk Officers who are assigned to various Wealth Management business verticals. The objective is to foster a unified and proactive approach to risk management, ensuring stringent regulatory compliance, and enabling secure technological innovation across all Wealth Management initiatives.

• Strategic Leadership & Governance:
  • Define and execute the multi-year Technology Risk roadmap for the Wealth Management division, ensuring alignment with firm-wide standards, industry best practices, and frameworks such as the NIST Cybersecurity Framework.
  • Lead the divisional Risk and Control Self-Assessment (RCSA) process and oversee regular control assessments to identify, evaluate, and mitigate technology risks specific to Wealth Management.
  • Act as the primary liaison for internal and external audits, regulatory examinations (e.g., SEC, FINRA, GDPR, CCPA, GLBA, state-specific privacy laws), and client due diligence requests, ensuring all commitments are met.
  • Provide executive-level reporting on risk trends, key risk indicators, and the overall technology risk profile to Wealth Management leadership, the AWM Operating Committee, and Firmwide Technology Risk leadership.
  • Oversee and guide a team of embedded Technology Risk Officers supporting specific Wealth Management business verticals, ensuring consistent application of risk management principles, policies, and controls.
• Technical Risk Advisory & Architecture:
  • Oversee the "Security Single Point of Contact" (SPOC) model for key Wealth Management initiatives, including new product launches, strategic projects, and M&A due diligence, ensuring security is integrated from inception.
  • Ensure that secure design principles, threat modeling, and OWASP Top 10 mitigations are systematically integrated into the architecture and development lifecycle of all Wealth Management applications and platforms.
  • Drive the adoption of advanced security patterns for cloud-native deployments (AWS preferred) and hybrid infrastructures, optimizing security posture while enabling business agility within Wealth Management.
• Product Security & SDLC Integration:
  • Champion the "Shift Left" philosophy by embedding automated security controls and practices within the Software Development Life Cycle (SDLC) using Agile methodologies across Wealth Management engineering teams.
  • Supervise the execution of comprehensive threat modeling, manual code reviews, penetration testing, and vulnerability assessments across the entire Wealth Management application portfolio.
  • Collaborate closely with Engineering and Dev Ops teams to enhance the firm's security posture through the implementation of automated CI/CD security gates and secure development practices.
• Client Due Diligence & Revenue Protection:
  • Oversee the client-facing security due diligence function for Wealth Management, supporting high-value prospect requests and existing client audits to protect and enable revenue streams. This includes addressing concerns related to privacy and data protection for individual clients.
  • Represent the firm's security maturity, technical resilience, and robust control environment to external individual and institutional clients, partners, and advisors in the Wealth Management sector.
• Innovation & Scaling:
  • Drive the integration of Artificial Intelligence (AI) and Machine Learning (ML) to automate risk detection, enhance…