Principal, Privacy & Security Technical Program Manager

WHO WE ARE

Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and Webull, and more than 20 million of our clients' customers. 

Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. As a global organization, we have offices in Austin, Dallas, Chicago, New York, Portland, Belfast, and Manila.

If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you. 

AFS has received a number of prestigious industry awards, including:

• 2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards

• 2021 Most Innovative Companies - presented by Fast Company

• 2021 Best API & Best Trading Technology - presented by Global Fintech Awards

ABOUT THIS ROLE

The Principal Privacy & Security Technical Program Manager is responsible for building and leading an enterprise-wide data protection and privacy program. This role designs, implements, and sustains comprehensive strategies, controls, and processes to safeguard critical information assets, ensure regulatory compliance, and enable secure, responsible use of data across on-premises, cloud, and endpoint environments. You will partner closely with the Data Privacy Officer, Chief Information Security Officer (CISO), and technology leaders to embed privacy-by-design and security-by-design across the enterprise. 

Key Responsibilities: 

• Develop & Lead Strategy: Define and execute the Enterprise Data Protection Strategy in partnership with the DPO, CISO, and key technology and business leaders. 

• Build a Scalable Practice: Launch and scale a Data Privacy & Protection practice that covers discovery, classification, tagging, loss prevention, encryption , and compliance with evolving regulations. 

• Data Discovery and Lifecycle Governance: Oversee data discovery, categorization, and classification initiatives to ensure all data is identified, appropriately categorized, and secured based on sensitivity and compliance requirements.  

• Operationalize Controls: Establish and oversee implementation of enterprise policies, standards, technical controls, ongoing operational governance and KPIs to protect sensitive data across on-prem, cloud, SaaS, and endpoint environments. 

• Establish Inventory & Classification Frameworks: Develop and maintain a comprehensive inventory of data assets, implementing risk-aligned classification and protection controls. 

• Champion and Embed Privacy & Security: Advocate and integrate privacy-by-design and security-by-design principles into product development, technology initiatives, and enterprise processes.  

• Conduct Data Flow Analysis to track how data moves across systems, ensuring security policies are enforced throughout its lifecycle. 

• Implement Data Labeling and Data Masking strategies to protect sensitive information, ensuring compliance with data protection laws (e.g., GDPR). 

• Foster strong cross-functional partnerships with Engineering, Product, Data/Analytics, Legal, Compliance, Risk, Operations and InfoSec teams.