Senior Vice President, Head of Cyber Threat Management

LPL Financial • Charlotte, NC

12d

About The Position

LPL Financial is seeking a highly accomplished and results-oriented Senior Vice President (SVP), Head of Cyber Threat Management to lead our threat defense strategy. This critical leadership role is responsible for overseeing and integrating several key functions that protect LPL's assets, data, and clients within a highly regulated financial services environment. As the SVP, Head of Cyber Threat Management, you will be responsible for the strategic direction and operational execution of the following core domains: Security Operations Center (SOC) Management: Oversee the 24/7/365 Security Operations Center , ensuring timely and effective detection, analysis, and response to security incidents. Mature monitoring, alerting, and incident response capabilities, utilizing modern security information and event management (SIEM) and Security Orchestration, Automation, and Response (SOAR) technologies. Threat Intelligence and Hunting: Enhance the Cyber Threat Intelligence (CTI) program to gather, analyze, and disseminate relevant threat data. Ensure CTI is effectively integrated into the SOC, Threat Hunting, and vulnerability management processes to drive proactive defense strategies. Lead a proactive Threat Hunting capability to search for, identify, and neutralize threats that evade existing security controls. Vulnerability Management and Penetration Testing: Direct the Vulnerability Management program, including scanning, analysis, prioritization, and remediation tracking across the enterprise. Lead the Penetration Testing, red team exercises, vulnerability disclosure and bug bounty programs, ensuring thorough identification of weaknesses in infrastructure, applications, and processes. Application Security (AppSec) Continue to mature a comprehensive Application Security strategy that integrates security into the entire Software Development Lifecycle (SDLC). Data Loss Prevention (DLP) and Insider Threat: Lead the strategic design and operation of the Data Loss Prevention (DLP) program to monitor and prevent sensitive data exfiltration. Continue to mature the Insider Threat program , integrating technology and processes to detect, investigate, and mitigate risks posed by internal actors. Stakeholder and Executive Communication: Collaborate with other departments to ensure a cohesive, risk-aware organizational approach to cybersecurity. Report to senior leadership , on the organization's security posture, cyber risk landscape, and the efficacy of the Threat Management program. Prior experience working with Legal and outside counsel during incident response and complex legal/regulatory matters is required.

Requirements

• 15 years of progressive experience in cybersecurity, with at least 7 years in a leadership role overseeing multiple, integrated threat management functions (managing managers)
• Proven ability to operate and mature cybersecurity programs within the financial services industry and highly regulated environments
• Deep technical understanding of modern adversarial techniques, tactics, and procedures (TTPs) , and effective defensive/mitigation strategies.
• Strong experience managing complex incident response scenarios and regulatory reporting obligations.
• Excellent communication and interpersonal skills , with the ability to articulate complex security risks and strategies to executive leadership, technical teams, and non-technical stakeholders.
• Prior experience working with Legal and outside counsel during incident response and complex legal/regulatory matters is required.

Nice To Haves

• Highly effective communicator with ability to influence business units.
• Analytical and problem-solving mindset.
• Highly organized and efficient.
• Leverages strategic and tactical thinking.
• Works calmly under pressure and with tight deadlines.
• Demonstrates effective decision-making skills.
• Is highly trustworthy; leads by example.
• Track record of successful personnel management.
• CISSP, CISM and/or SANS certification a plus.

Responsibilities

• Oversee the 24/7/365 Security Operations Center , ensuring timely and effective detection, analysis, and response to security incidents.
• Mature monitoring, alerting, and incident response capabilities, utilizing modern security information and event management (SIEM) and Security Orchestration, Automation, and Response (SOAR) technologies.
• Enhance the Cyber Threat Intelligence (CTI) program to gather, analyze, and disseminate relevant threat data.
• Ensure CTI is effectively integrated into the SOC, Threat Hunting, and vulnerability management processes to drive proactive defense strategies.
• Lead a proactive Threat Hunting capability to search for, identify, and neutralize threats that evade existing security controls.
• Direct the Vulnerability Management program, including scanning, analysis, prioritization, and remediation tracking across the enterprise.
• Lead the Penetration Testing, red team exercises, vulnerability disclosure and bug bounty programs, ensuring thorough identification of weaknesses in infrastructure, applications, and processes.
• Continue to mature a comprehensive Application Security strategy that integrates security into the entire Software Development Lifecycle (SDLC).
• Lead the strategic design and operation of the Data Loss Prevention (DLP) program to monitor and prevent sensitive data exfiltration.
• Continue to mature the Insider Threat program , integrating technology and processes to detect, investigate, and mitigate risks posed by internal actors.
• Collaborate with other departments to ensure a cohesive, risk-aware organizational approach to cybersecurity.
• Report to senior leadership , on the organization's security posture, cyber risk landscape, and the efficacy of the Threat Management program.

Benefits

• LPL Total Rewards package is highly competitive, designed to support your success at work, at home, and at play – such as 401K matching, health benefits, employee stock options, paid time off, volunteer time off, and more.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive
• Number of Employees: 5,001-10,000 employees