Department Lead - Head of Application Security

Position Type

Home Office

Position Schedule

Full-Time

EEO Statement

Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.

Posting Location

Missouri, St. Louis

Company Description

Join a financial services firm where your contributions are valued.  Edward Jones is a Fortune 500¹ company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we’re proud to be privately-owned, placing the focus on our clients rather than shareholder returns.

Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. 

People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. 

View our Purpose, Inclusion and Citizenship Report.

¹Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating.
 

External Flexible Work Option(s)

Hybrid, Onsite, Remote

Awards and Accolades

At Edward Jones, we are building a place where everyone feels like they belong.  We're proud of our associates' contributions to the firm and the recognitions we have received.

Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones

Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones

Country

United States

Search Headquarters Positions by Area of Interest

LEADERSHIP, TECHNOLOGY

Position Requirements

What Experience You'll Need:

• 12+ years in cybersecurity with deep, hands-on application security leadership experience, including program ownership at scale.
• Proven executive leadership experience (e.g., Director/MD/VP level) leading teams and influencing enterprise outcomes.
• Demonstrated ability to implement and operationalize: Secure SDLC and security controls integrated into CI/CD pipelines, threat modeling at scale (methodology + adoption + outcomes), SBOM/SBOMBs and software supply chain governance, penetration testing programs and remediation lifecycle management.
• Strong technical depth across modern application architectures (cloud, microservices, containers, APIs, mobile, web).
• Demonstratable knowledge on the use of AI developer tools and how to use them securely in an enterprise environment.
• Experience partnering with Risk/Compliance/Audit in regulated environments (financial services preferred).
• Ability to communicate complex security topics clearly to executives and non-technical stakeholders.

Preferred Qualifications

• Experience with large-scale engineering transformation (DevSecOps, platform engineering, cloud migration).
• Familiarity with secure software supply chain practices and dependency governance.
• Recognized security certifications (e.g., CISSP, CISM, CSSLP, OSCP/OSWE, GIAC) are a plus.
• Experience defining application risk tiering models and security launch criteria.
• Experience with AI developer tools and technologies and how to use them responsibly and securely.

Core Competencies

• Executive presence and ability to influence at CISO/CTO/CIO levels
• Strong program management and operational rigor
• Ability to balance risk reduction with delivery enablement (“security as an accelerator”)
• Talent development and building high-trust, high-performance teams
• <