OverviewCyber Resilience & Assurance Program Manager to help establish and mature a strategic cybersecurity program. With the capability focused on validating the effectiveness of security controls, operational readiness, technology platforms, AI security safeguards, and cyber resilience programs.
The Opportunity:You will have the unique opportunity to build a program from the ground up while partnering across the firm to develop assessment methodologies, governance frameworks, resilience exercises, executive reporting, and long-term strategies.
The Day-to-Day:- Help build and mature our Cyber Resilience & Assurance program
- Develop governance frameworks, standards, operating procedures, and assessment methodologies
- Establish validation approaches for cybersecurity controls, operational readiness, technology platforms, and cyber resilience activities
- Evaluate the effectiveness of security controls across identity, infrastructure, network, cloud, application, and AI environments
- Support threat-informed security assessments, attack simulations, exercises, and security validation activities
- Analyze attack paths, control effectiveness, and organizational readiness against evolving threats
- Develop metrics, scorecards, and executive reporting to measure cyber resilience and security effectiveness
- Work with business and technology partners to identify improvement opportunities and strengthen overall cyber resilience
- Contribute to the long-term roadmap, strategy, and maturity of the Cyber Resilience & Assurance program
- Understanding of threat actor tactics, techniques, and procedures (TTPs)
- Working knowledge of the MITRE ATT&CK Framework
- 3+ years of experience with modern attack methodologies
Your Qualifications:- Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, Red Team, or Purple Team capabilities
- Experience conducting security assessments, attack simulations, adversarial exercises, or threat-led testing activities
- Experience working within Financial Services, Wealth Management, Banking, Insurance, or other highly regulated industries
- Familiarity acting as a Red Team, or Purple Team member with cyber resilience exercises, security control validation, and operational readiness assessments
- Experience evaluating new technologies, including cloud and frontier AI security controls
Preferred Qualifications:
- Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, with Red Team, or Purple Team capabilities.
- Experience as a Red Team, or Purple Team member that has conducted security assessments, attack simulations, adversarial exercises, or threat-led testing activities.
- Experience with cloud security testing or emerging technology security assessments.
- Experience working in Financial Services or other highly regulated environments.
- OSCP, OSEP, CRTP, or CRTE
- GPEN, GCIH, or GDAT
- CEH or PenTest+
- Cloud or security architecture certifications
- 100% paid medical, dental and vision premiums for you and your qualifying dependents
- A 50% 401(k) match, up to the IRS maximum
- 20 days of PTO, plus 10 paid holidays
- Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care
- This is an in-office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This program is subject to change.
