Director, Information Security

Job Description:

AssetMark is a leading strategic provider of innovative investment and consulting solutions serving independent financial advisors. We provide investment, relationship, and practice management solutions that advisors use in helping clients achieve wealth, independence, and purpose.

The Job/What You'll Do:

The Director of Information Security – AI & Cloud Security leads the security strategy and control environment for the company’s cloud platforms and use of artificial intelligence. This leader works with engineering, infrastructure, data, legal, compliance, risk, and business teams to make security requirements part of architecture and delivery.

The role focuses on practical safeguards for cloud workloads, sensitive data, identities, and AI services. It also ensures that control decisions are documented, risks are tracked, and evidence is available for audits and regulatory reviews.

We can only consider candidates for this position who are able to accommodate a hybrid work schedule and are close to our Atlanta, GA office.

Key responsibilities

AI security and governance

- Establish security requirements for the use, development, procurement, and integration of AI services, including generative AI, AI coding tools, and AI-enabled business applications.
- Partner with AI governance, Legal, Compliance, Privacy, and business owners to assess use cases, data handling, third-party services, and potential risks.
- Define controls for sensitive data, identity, access, logging, retention, and vendor connectivity when AI systems process company, employee, or client information.
- Assess AI-related threats, including data exposure, prompt injection, insecure integrations, excessive permissions, and risks from models, plugins, or other third parties.
- Maintain an inventory of approved AI services and material AI use cases, with documented control requirements, risk decisions, and exceptions.

Cloud security

- Set security architecture standards and technical guardrails for cloud environments, with a focus on Azure and relevant AWS services.
- Strengthen cloud identity and access controls, including least privilege, privileged access management, workload identities, and secure third-party access.
- Oversee cloud security posture, configuration management, vulnerability remediation, secrets and key management, network protections, and security logging.
- Partner with engineering and platform teams to build security into APIs, databases, containers, infrastructure as code, and software delivery pipelines.
- Ensure cloud backup, recovery, resilience, and incident response plans are tested and that remediation actions are tracked to completion.

Risk, assurance, and leadership

- Translate security risks and control gaps into clear priorities, accountable owners, and measurable remediation plans.
- Maintain audit-ready documentation and evidence for relevant internal and external reviews, including SOC and other applicable regulatory or contractual requirements.
- Develop metrics that show cloud and AI risk trends, control performance, remediation progress, and material exceptions.
- Lead and develop security engineering or architecture staff, as assigned, and build effective working relationships across technology and business teams.
- Communicate material risks, decisions, and progress clearly to the CISO and senior leadership.

Knowledge, Skills, & Abilities

- Demonstrated experience designing and implementing security controls in Azure; working knowledge of AWS or other major cloud platforms.
- Strong understanding of identity and access management, privileged access, cloud architecture, data protection, vulnerability management, logging, and incident response.
- Experience translating security requirements into technical standards and controls that engineering teams can implement.
- Experience supporting audits, control assessments, risk remediation, or regulatory reviews.
- Strong communication skills, including the ability to explain technical risks and options to executives and nontechnical partners.

Education & Experience

- 10 or more years of experience in information security, cloud security, security engineering, or closely related technology roles.
- At least 5 years leading teams, programs, or cross-functional security initiatives.
- Experience securing AI services, AI development tools, model integrations, or third-party AI platforms.
- Experience in financial services or another regulated industry.
- Familiarity with Microsoft Entra ID, Azure Policy, cloud security posture tools, key management, API management, Kubernetes, and infrastructure as code.
- Relevant certifications such as CISSP, CISM, CCSP, or Azure/AWS security or architecture certifications.

Compensation: The Base Salary range for this position is between $190,000-$210,000.

This information reflects a base salary range that AssetMark reasonably expects to pay for the position based on a number of factors which may include job-related knowledge, skills, education, experience, and actual work location. This position will also be eligible for additional variable incentive compensation and competitive benefits.

Candidates must be legally authorized to work in the US to be considered. We are unable to provide visa sponsorship for this position.

#LI-DNP

Who We Are & What We Offer:

We are AssetMark, a company on the move, shaping the future of financial services. Growth is in our DNA. Every day, we combine technology, insight, and collaboration to create new possibilities for advisors, for our people and for our investors. At AssetMark your ideas matter; they’re heard, valued, and drive meaningful change. Join a team that sets new standards and creates space for you to thrive and do your best work.

Our Mission

Our mission is simple: to help our 10,500+ financial advisors make a meaningful difference in their clients’ lives. We do this by combining powerful technology, holistic support, and expert consulting to help advisors run stronger, more efficient businesses. Backed by a comprehensive suite of investment solutions and a trust company that boasts of $150B+ AUM, our platform empowers advisors to deliver exceptional service and an outstanding client experience.

Our Values

Heart. Client Success. Integrity. Respect. Excellence. Our values are how we show up every day.

We believe in:

- Leading with Heart, in truly making a difference in the lives of others: teammates, clients, investors and communities.
- Obsessing over Client Success, bringing a relentless focus on what matters to clients that sets us apart and creates loyal, lasting relationships.
- Unyielding Integrity, doing what’s right, always. Even when it’s hard.
- Collective Respect, in being authentic, inclusive and valuing all voices while winning together.
- Operating with Excellence, in learning fast, continuously improving, innovating and collaborating to find new and better solutions.

These values shape our culture, guide our decisions, and define what it means to be part of the AssetMark family.

Our Culture & Benefits

Our culture brings our mission and values to life. Here, we do what’s right, embrace diverse ideas, and innovate together. We also offer a wide range of benefits to support you and your family—because thriving at work starts with thriving in life.

- Flex Time or Paid Time Off and Sick Time Off
- 401K – 6% Employer Match
- Medical, Dental, Vision – HDHP or PPO
- HSA – Employer contribution (HDHP only)
- Volunteer Time Off
- Career Development / Recognition
- Fitness Reimbursement
- Hybrid Work Schedule

As an Equal Opportunity Employer, AssetMark is committed to building a diverse and inclusive workplace where everyone feels valued.