Department Leader - IS Governance, Risk, and Compliance

Position Type

Home Office

Position Schedule

Full-Time

EEO Statement

Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.

Posting Location

Arizona, Tempe, Missouri, St. Louis

Company Description

Join a financial services firm where your contributions are valued.  Edward Jones is a Fortune 500¹ company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we’re proud to be privately-owned, placing the focus on our clients rather than shareholder returns.

Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. 

People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. 

View our Purpose, Inclusion and Citizenship Report.

¹Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating.
 

External Flexible Work Option(s)

Hybrid

Awards and Accolades

At Edward Jones, we are building a place where everyone feels like they belong.  We're proud of our associates' contributions to the firm and the recognitions we have received.

Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones

Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones

Country

United States

Search Headquarters Positions by Area of Interest

LEADERSHIP, TECHNOLOGY

Position Requirements

What Experience You'll Need:

• 10+ years relevant cyber, technology, and / or data risk experience in progressive roles
• 5+ years of leadership preferred
• Be available for on-call work and/or work scheduled outside normal business hours as needed
• Be able to support highly confidential security investigations that require making critical decisions in extremely high-pressure situations that can have significant impact to the Firm (cost, inability to continue business operations, regulatory impacts and fins, and damage to EDJ brand and clients)

• Experience in leading a large team of individual contributors or team of leaders. Including demonstratable experience in: defining strategic initiatives, tracking execution of strategic initiatives against clearly defined metrics, basic budget management, resource management, talent development and coaching, and strong employee engagement.    
• In-depth knowledge around leading a security or risk organization (preferably in a regulated industry such as financial). Including: Exceptional, concise, executive-level verbal and written communication, compliance and regulatory adherence, audit and regulatory exam support, continual understanding of the cyber threat landscape, cyber risk management, cyber governance, cyber risk/control/maturity frameworks, cyber technology landscape, and vendor relationship management.
• Subject matter expertise in at least one security domain or two sub-domains. Including: Cyber Governance, Risk and Compliance; Threat and Vulnerability Management; Identity and Access Management; Security Engineering and Operations; Security Architecture; Application Security; Cyber Resilience and Recovery; or Insider Risk.
• Functional understanding of core enterprise technology platforms and best practices. Including: infrastructure, software, data, cloud, engineering, architecture, digital transformation, change management, crisis management, business continuity, and disaster recovery. 

What Could Set You Apart:

• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)