{"id":2051291,"url":"https://alion.io/job/ptma-vice-president-information-security","title":"Vice President, Information Security","company":{"id":687494,"name":"PTMA","domain":"ptma.com","url":"https://alion.io/company/ptma","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":null},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Denver, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":135000,"max_usd":288000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":155},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Commander.js","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Fabric","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true}],"status":"live","first_seen_at":"2026-10-07T19:59:39Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-19T04:54:12Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"PTMA is an SEC-registered investment adviser serving governments, school districts, and public agencies across treasury management, cash and liquidity management, and investment advisory services. Our clients trust us with public funds and sensitive financial data, and we treat protecting that trust as a core business obligation. We are a firm of about 300 people with a technology organization spanning Information Security, Data & AI, Salesforce, and Corporate IT.The firm’s primary operational hubs are in Denver, Colorado, and Naperville, Illinois, with other offices throughout the United States.\nThe VP, Information Security is PTMA's senior security executive and owns our information security program end to end. This leader sets security strategy, runs day-to-day security operations through an in-house team and managed service partners, commands incident response, and represents the program to the executive team, the board, regulators, auditors, and clients.\nThe role reports to the Chief Information, Data & AI Officer, with a dotted line to the General Counsel and Chief Compliance Officer and a documented right to escalate directly to the CEO and board. That structure gives security the authority to challenge technology decisions as a peer of IT, not a subordinate to it.\nWe are looking for a builder. Our controls, tooling, and incident response roadmap are in place and maturing. The VP will turn that foundation into a measurable, exam-ready program that scales with our growth and our expanding use of data and AI.\nKey responsibilities\nProgram strategy and leadership\nOwn the information security strategy, multi-year roadmap, and annual budget, aligned to PTMA's business and technology plans.\nRun the firm's cyber risk assessment cycle, maintain the risk register, and present risk acceptance decisions to executive leadership.\nReport program health, top risks, and incidents to the executive team and the board on a regular cadence, in business terms.\nGovernance, regulatory, and audit\nMaintain the written information security program, policies, and standards, and keep them current with regulatory change.\nLead security readiness for SEC examinations, internal and external audits, client due diligence questionnaires, and cyber insurance renewals.\nOwn compliance of security controls with SEC Regulation S-P (including incident response and customer notification requirements), SEC Rule 204-2 recordkeeping, and PCI DSS where applicable.\nPartner with Legal and Compliance on regulatory interpretation, breach notification decisions, and client contract security terms.\nSecurity operations and incident response\nServe as incident commander for security incidents, from detection through containment, notification, and post-incident review.\nComplete and maintain our incident response playbook library, and run tabletop exercises with technical teams and executive leadership.\nManage managed detection and response and other security service providers to defined service levels.\nOwn log management and SIEM retention, vulnerability management, and threat intelligence programs.\nSecurity architecture and technology\nOwn the security technology stack across endpoint, email, identity, cloud security posture, network, and secure access service edge.\nSet security requirements for cloud, SaaS, and data platform initiatives, including Microsoft 365, Azure, Microsoft Fabric, and Salesforce.\nDefine security and privacy controls for AI adoption in partnership with the Data & AI team and the firm's AI governance council.\nRun third-party and vendor risk assessments for technology providers.\nTeam and culture\nLead, develop, and grow the information security team, with clear career paths and development plans.\nRun security awareness training and phishing simulation programs for all employees.\nBuild working relationships across IT, Data & AI, Salesforce, Product, HR, and Compliance so that security is part of how work gets done.\nFirst-year success measures\nIn the first 12 months, the VP will:\n1.Deliver a security strategy and 3-year roadmap, approved by executive leadership, within the first 90 days.\n2.Own and present board security reporting independently, with a defined metrics set the board sees every cycle.\n3.Close all open findings from the current incident response playbook reviews and complete the remaining playbooks in the roadmap.\n4.Run at least one executive tabletop exercise and one technical incident simulation.\n5.Refresh the cyber risk assessment, with every high risk carrying an owner, a remediation plan, and a target date.\n6.Bring the firm through any SEC examination, audit, or major client due diligence request without a material security finding.\n7.Put a written development plan in place for every member of the security team.\nQualifications\nRequired\n12+ years in information security, including 5+ years leading a security program or function.\nSecurity leadership experience at an SEC- or FINRA-regulated firm, such as an investment adviser, broker-dealer, asset manager, or bank.\nDirect experience leading regulatory examinations, audits, and client security due diligence.\nA track record of presenting security risk to boards or audit and risk committees.\nHands-on incident response leadership, including acting as incident commander.\nExperience managing outsourced security services (MDR, MSSP) to service levels.\nWorking knowledge of Microsoft cloud security (Entra ID, Microsoft 365, Azure) and modern cloud and SaaS security controls.\nBachelor's degree in a related field, or equivalent experience.\nPreferred\nCISSP, CISM, or equivalent senior security certification.\nExperience building a security program at a mid-sized firm of 200 to 1,000 employees.\nFamiliarity with NIST CSF, CIS Controls, and SEC Regulation S-P requirements.\nExperience with public-sector clients and their security expectations.\nExposure to AI governance and the security of AI and data platforms.\nNO AGENCIES PLEASE","description_format":"text","description_chars":5957,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Asset Management & Funds"],"lifecycle":[{"event":"open","at":"2026-10-07T21:50:45Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.855,"p_room":1,"age_days":9,"expected_fill_days":50,"reasons":["conf:1","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ptma-vice-president-information-security","json_url":"https://alion.io/job/ptma-vice-president-information-security.json","meta":{"generated_at":"2026-10-19T05:43:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3522,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":687494},"rest":"https://alion.io/mcp/rest/get_company?id=687494"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fptma-vice-president-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fptma-vice-president-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fptma-vice-president-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ptma-vice-president-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fptma-vice-president-information-security"}]}