DriveWealth

Security Engineer

• Lead the organization's governance, risk, and compliance program
• Ensure alignment with SEC/FINRA obligations and global data-protection laws
• Own security metrics and executive/board reporting
• Establish and run cyber threat intelligence capabilities
• Manage internal and external security audits and examinations
• Own and maintain the Incident Response Plan (IRP)
• Oversee vendor risk management processes
• Engage with internal business units, regulators, and external partners on security matters
• Act as subject-matter expert for security compliance

Head of Security, GRC

Principal

• Serve as the principal administrator and subject matter expert for Okta, including SSO and SCIM integrations, Okta Workflows, and Okta Identity Governance (OIG)
• Design, build, and maintain group rules and access policies that support least-privilege and lifecycle management
• Manage Okta licensing, entitlements, and platform capacity planning
• Demonstrate deep expertise on how authentication rules are applied within Okta, and update and tune these policies as business and security needs evolve
• Maintain strong working knowledge of the Auth0 platform, including tenants, rules/actions, and application configurations
• Create, configure, and troubleshoot Identity Provider (IdP) connections across all major IdP types (SAML, OIDC, social, enterprise directories, etc.)
• Diagnose and resolve authentication and federation issues across integrated applications
• Leverage Okta, Auth0, and related APIs to automate identity workflows, integrations, and reporting
• Troubleshoot and build API-based solutions to extend platform capabilities beyond native UI functionality
• Configure and manage SSO connections for external clients and enterprise customers, acting as the primary technical point of contact for partner-side IT/security teams during setup
• Apply working knowledge of AWS and AWS Identity Center to support cloud identity federation and access management
• Secure access to AI/ML platforms, tools, and resources, including LLM APIs, AI agents, and machine-to-machine authentication for AI-driven services
• Act as a trusted advisor to security, IT, and application teams on identity best practices and architecture decisions
• Map IAM controls to compliance and Zero Trust frameworks in partnership with GRC teams
• Mentor junior IAM engineers and contribute to the long-term IAM roadmap
• Document standards, runbooks, and processes to mature the IAM program

Head of Security, GRC

Principal IAM Lead