AM Public-Dallas-Associate-Security Engineering

Role Overview
The Information Security Officer for Asset Management is a critical leadership position responsible for defining, implementing, and overseeing the comprehensive information security and cybersecurity risk posture specifically within the Asset Management Private business. This role is pivotal in balancing commercial objectives with robust security controls, ensuring the division's resilience against an evolving threat landscape, and protecting client assets and data.
This leader will directly manage and provide strategic direction to teams responsible for Governance, Risk & Compliance (GRC), Application Security & Advisory, and Product Security functions within Asset Management. Crucially, this role also involves the oversight and guidance of embedded Technology Risk Officers who are assigned to various Asset Management Private business vertical. The objective is to foster a unified and proactive approach to risk management, ensuring regulatory compliance, and enabling secure technological innovation across all Asset Management initiatives.
Key Responsibilities
Work with internal application development teams that are developing the next generation of critical business applications, enable them to understand Information Security and Business Resiliency control requirements, and advise on the integration of these controls into their applications
Collaborate with the global Application Security Risk, Business Continuity, Risk Measurement, and other global Technology Risk teams to develop and integrate best-in-class security and resiliency controls and practices.
Communicate the impact of technology risks and the approach to mitigation/acceptance and provide risk assessment and advisory services to technology engineers, and technology and business management.
Assess existing applications for design-related security risks and assist teams in determining appropriate remediation steps
Provide guidance to engineering leadership and application developers on existing and emerging threats in the web and mobile application space.
Drive adoption of embedded application security controls as part of the Software Development Life Cycle (SDLC).
Provide deep subject matter expertise to application teams in secure application design and development approaches and techniques.
Contribute to the technical understanding, adoption and convergence of information security standards, solutions and tools.
Work with engineers to develop customized security testing strategy to complement the existing security testing program managed by Technology Risk.