Director, Platform Security Engineering and Operations

Description

The company is a global firm offering wealth management, asset servicing, asset management and banking, serving individuals, families, corporations and institutions worldwide. It has been operating since 1889 and has more than 135 years of financial experience and over 24,000 employees.

This is a people leadership role that sets the strategy, governance and delivery for the company's enterprise security platforms. You will set direction, prioritize work, grow engineering and operations talent, and deliver secure, resilient and audit-ready platform results. You will shape technical strategy, clear obstacles for the team, work with cross-functional partners, and explain complex security engineering work as risk, control and business outcomes for senior stakeholders.

Responsibilities

• Lead, coach and grow a team of security engineers who run enterprise security platforms.
• Set technical and operational direction for zero-trust, SASE/SSE, network, vulnerability and exposure management, AI guardrails and SaaS security tools.
• Create engineering standards, implementation patterns, operating models and runbooks so the team executes consistently.
• Set team goals, maturity models and performance metrics covering delivery, assurance, compliance and measurable risk reduction.
• Coordinate security initiatives with engineering, infrastructure, application, risk, audit and operations teams.
• Be accountable for designing, building, coordinating and running intrusion prevention (IPS) on next-gen firewalls.
• Be accountable for designing, building, coordinating and running vulnerability scanning platforms and the unified vulnerability management (UVM) layer.
• Be accountable for designing, building, coordinating and running enterprise SASE and SSE security platforms.
• Be accountable for designing, building, coordinating and running secure web gateway, CASB and cloud access protection.
• Be accountable for designing, building, coordinating and running SaaS application protection and monitoring.
• Be accountable for designing, building, coordinating and running secure remote access and internet traffic inspection.
• Be accountable for designing, building, coordinating and running browser isolation and modern web threat prevention.
• Be accountable for designing, building, coordinating and running AI gateway controls that govern how users and applications use LLMs and AI services.
• Be accountable for designing, building, coordinating and running ServiceNow integrations for Vulnerability Response, ITSM and CMDB.
• Own platform health, upgrades, capacity, resilience, lifecycle management, vendor management and escalation across the whole stack.
• Define, review and communicate metrics on coverage, control effectiveness, SLA adherence, tool health, team throughput and measurable risk reduction.
• Make sure audit and regulatory support has strong evidence, traceability, repeatable operations and clear ownership under PCI-DSS, SOX, GLBA, OCC/FFIEC and related expectations.
• Review and approve engineering, operations and executive documentation used by security engineering, operations, risk and audit stakeholders.
• Lead prioritization, investment recommendations, capability evaluations, proofs of concept and tool rationalization based on risk reduction, operational fit, cost and control outcomes.

Requirements

• Have 15+ years of experience in information technology, cybersecurity, cloud, infrastructure, network security or platform engineering, including more than 5 years leading enterprise-scale security teams or major security engineering programs.
• Show proven people leadership: setting direction, developing talent, assigning work, managing priorities, coaching senior engineers and holding people accountable for delivery and operational excellence.
• Bring deep expertise in vulnerability scanning, zero trust architecture, network security, SASE/SSE platforms and web security architectures.
• Communicate well with executives: brief senior stakeholders, explain risk and control tradeoffs, support audit inquiries and align teams and leaders.
• Have worked in a regulated environment handling control evidence, operational resilience, risk acceptance, issue management and audit or regulatory responses.
• Balance strategic planning, operational execution, team capacity, stakeholder expectations and regulatory commitments in a complex enterprise.
• Have prior experience in financial services, banking, asset servicing, wealth management or another highly regulated industry.
• Have prior experience leading globally distributed or matrixed engineering teams through platform modernization, tool consolidation or operating model change.

Conditions

Base salary range: $164,600 - $288,000 USD, a good faith estimate of base pay.

Benefits include retirement plans (401k and pension), health and welfare coverage (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life and accident insurance, and optional well-being benefits.

A discretionary bonus program is available, which may include an equity component.

You must be authorized to work in the U.S. now and in the future without employment-based visa sponsorship. The company will not sponsor any employment-based U.S. work visa for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other.

Benefits

• Retirement plans, health and welfare coverage, paid time off, parental and caregiver leave, life and accident insurance and voluntary well-being benefits.
• A discretionary bonus program that may include equity.
• A flexible, collaborative culture with a long record of financial strength and stability, accessible senior leaders, and internal moves encouraged.
• Company-supported giving, where employees across the world contribute time and skills to their communities.