Director, Information Security

AssetMark•Atlanta, GA

1d•$190,000 - $210,000•Hybrid

About The Position

The Director of Information Security – AI & Cloud Security leads the security strategy and control environment for AssetMark’s cloud platforms and use of artificial intelligence. The role partners with engineering, infrastructure, data, legal, compliance, risk, and business teams to integrate security requirements into architecture and delivery. It focuses on safeguards for cloud workloads, sensitive data, identities, and AI services, while ensuring control decisions are documented, risks are tracked, and evidence is available for audits and regulatory reviews. Candidates must be able to accommodate a hybrid work schedule and be close to the Atlanta, Georgia office. The role establishes security requirements and governance for AI services and defines cloud security architecture standards and technical guardrails, primarily for Azure and relevant AWS services. It also leads risk remediation, audit readiness, security metrics, and communication of material risks to the CISO and senior leadership. The position may lead and develop security engineering or architecture staff, as assigned. The position offers a base salary range of $190,000–$210,000, additional variable incentive compensation, and competitive benefits. Candidates must be legally authorized to work in the United States; visa sponsorship is not available.

Requirements

10 or more years of experience in information security, cloud security, security engineering, or closely related technology roles.
At least 5 years leading teams, programs, or cross-functional security initiatives.
Demonstrated experience designing and implementing security controls in Azure.
Working knowledge of AWS or other major cloud platforms.
Strong understanding of identity and access management, privileged access, cloud architecture, data protection, vulnerability management, logging, and incident response.
Experience translating security requirements into technical standards and controls that engineering teams can implement.
Experience supporting audits, control assessments, risk remediation, or regulatory reviews.
Strong communication skills, including the ability to explain technical risks and options to executives and nontechnical partners.
Experience securing AI services, AI development tools, model integrations, or third-party AI platforms.
Experience in financial services or another regulated industry.
Candidates must be legally authorized to work in the United States; visa sponsorship is not available.

Nice To Haves

Familiarity with Microsoft Entra ID, Azure Policy, cloud security posture tools, key management, API management, Kubernetes, and infrastructure as code.
Relevant certifications such as CISSP, CISM, CCSP, or Azure/AWS security or architecture certifications.

Responsibilities

Establish security requirements for the use, development, procurement, and integration of AI services, including generative AI, AI coding tools, and AI-enabled business applications.
Partner with AI governance, Legal, Compliance, Privacy, and business owners to assess AI use cases, data handling, third-party services, and potential risks.
Define controls for sensitive data, identity, access, logging, retention, and vendor connectivity when AI systems process company, employee, or client information.
Assess AI-related threats, including data exposure, prompt injection, insecure integrations, excessive permissions, and risks from models, plugins, or other third parties.
Maintain an inventory of approved AI services and material AI use cases, documenting control requirements, risk decisions, and exceptions.
Set security architecture standards and technical guardrails for cloud environments, focusing on Azure and relevant AWS services.
Strengthen cloud identity and access controls, including least privilege, privileged access management, workload identities, and secure third-party access.
Oversee cloud security posture, configuration management, vulnerability remediation, secrets and key management, network protections, and security logging.
Partner with engineering and platform teams to build security into APIs, databases, containers, infrastructure as code, and software delivery pipelines.
Ensure cloud backup, recovery, resilience, and incident response plans are tested and remediation actions are tracked to completion.
Translate security risks and control gaps into clear priorities, accountable owners, and measurable remediation plans.
Maintain audit-ready documentation and evidence for internal and external reviews, including SOC and applicable regulatory or contractual requirements.
Develop metrics showing cloud and AI risk trends, control performance, remediation progress, and material exceptions.
Lead and develop security engineering or architecture staff, as assigned, and build effective relationships across technology and business teams.
Communicate material risks, decisions, and progress clearly to the CISO and senior leadership.