Head of Cybersecurity and IT Risk

Position Overview

The Technology Department at Dimensional leverages the rapidly evolving state of the art to engineer platforms that power innovative, research-driven financial and technical products to improve our client’s financial lives. As leader of the Cybersecurity and IT Risk teams, you will develop the next evolution of the Cybersecurity/Risk Program by maturing operational capabilities, implementing new defensive strategies, building threat intelligence/management capabilities, and driving down risk across the enterprise.

Key Responsibilities

• Assess, evolve and lead the Cybersecurity program to achieve appropriate levels of risk for the enterprise.
• Establish and drive a risk framework to identify areas of opportunity for further risk mitigation.
• Manage and grow a multidisciplinary team personally and professionally to meet enterprise and individual goals.
• Interface regularly with Executive Management and the Board of Directors to ensure alignment of our control portfolio and associated outcomes.
• Partner with peers in technology, legal, compliance and enterprise risk to ensure alignment of goals and outcomes.
• Ensure that we meet or exceed regulatory standards and commitments; stay informed of the ever-changing regulatory landscape.
• Drive incident management capabilities through leadership and rigorous process.
• Measure everything – create visibility for executives, board members, and operational teams.
• Report to boards, executives, and key stakeholders on our state of risk.
• Optimize operational capabilities to provide robust detection/prevention and produce actionable intelligence.
• Design, refine and implement a threat-informed defense strategy.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems/Technology, Cybersecurity, Risk Management or related field; advanced degree is a plus, or equivalent practical experience.
• 10+ years’ experience in building and managing enterprise cybersecurity and risk functions.
• Proven track record of building and managing security subteams (engineering, operations, GRC, etc.) to effectively improve an organization’s security posture.
• Experience with organizational change management and a focus on managing user experience.
• Deep understanding of technology infrastructure and its role in enabling business operations.
• Experience interfacing and communicating with executives regarding cybersecurity and risk responsibilities.
• Familiarity with financial and cybersecurity regulatory frameworks and responsibilities.
• Experience leading enterprise-scale projects, processes, and initiatives.

Preferred Qualifications

• Certifications such as CISSP, GSLC, GSOM, GISP, GCIL, OSCP, or GSE.
• Experience with international regulatory data protection and privacy standards (e.g., GDPR, DORA).
• Experience in incident management and reporting.
• Experience in the financial services industry with familiarity of relevant regulatory requirements.

Benefits & Perks

• Hybrid Work Environment: Most roles follow an office-first hybrid approach with in-person collaboration on Tuesdays, Wednesdays, and Thursdays, and the flexibility to work in the office or remotely on Mondays and Fridays.
• Dimensional offers a variety of programs to support you, your family, and your career.
• Educational initiatives and career development opportunities.
• Comprehensive Benefits: Enjoy extensive benefits designed to take care of your personal and professional needs.