Hiring: Managing Director Information Security Company: Cresset Location: Chicago, IL Job Posted Time: 2026-09-16 13:02:38 Employment Type: Internship / Hybrid Target Skills & Keywords : CyberArk, GDPR, IAM, Okta, Penetration Testing, RBAC, Regulatory Compliance, Risk Management, SIEM, SSE, SaaS, Wealth Management About the job Experience: •10+ years of progressive information security experience. •5+ years leading enterprise information security teams, preferably as a Head of Information Security, Director of Information Security, Senior Director, or similar leadership role. •Demonstrated success developing high-performing teams and managing external vendors and strategic partners. Required Skills: •We are seeking an experienced •To lead Cresset's enterprise information security program. This senior technology leadership role is responsible for developing and executing the firm's information security strategy, protecting client and firm information assets, and leading the Information Security team. •We expect our employees to work in the office three days per week as part of our hybrid work environment. •Security Strategy, Governance & Leadership •Develop and execute Cresset's multi-year information security roadmap aligned with the firm's technology strategy and business priorities. •Maintain the firm's Information Security Program, including security policies, standards, and governance processes. •Assess the current security environment and develop prioritized plans to strengthen the firm's overall security posture. •Partner with the CTO, Compliance, Legal, HR, and business leaders to identify, assess, and mitigate cybersecurity risks. Qualifications: •Comprehensive expertise in Identity & Access Management, including authentication, authorization, RBAC, PAM, SSO, MFA, and identity governance. •Strong knowledge of cloud security, data protection, DLP technologies, CASB/SSE platforms, SIEM, SOAR, and endpoint security. \ •In-depth knowledge of cybersecurity and privacy regulations applicable to financial services, including SEC Regulation S-P, Regulation S-ID, GLBA, FFIEC, PCI-DSS, GDPR, and CCPA. •Leadership & Communication •Proven ability to develop security strategy, build consensus, and lead organizational change across technical and business stakeholders. •Strong communication skills with the ability to translate technical risks into business terms for executive leadership and business partners. •Excellent analytical, problem-solving, and risk-based decision-making skills. •Demonstrated ability to build trusted relationships across Technology, Compliance, Legal, and business functions. •Bachelor's degree in Information Security, Computer Science, or a related field; advanced degree preferred. Compensation: •$210,000 - $300,000 / year Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!