The Director is generally autonomous in their oversight and active management for a Technology program and/or practice area and most often reports directly to a Senior Director or Vice President. This role leads the strategy, engineering, and operations of enterprise Web Application Firewall (WAF) protection, Public Key Infrastructure (PKI) and Certificate lifecycle management, secure software development, and public cloud platform, ensuring applications and APIs are protected across on-premises and cloud environments while adopting emerging and evolving AI capabilities.
Essential Job Functions:
Process and Operations
Directly manage and/or influence separate teams focused on delivering high quality results within one or more major technology disciplines: strategy, software development, operations, engineering, development services, information security, and compliance.
Own the strategy, architecture, and day-to-day operations of the enterprise Web Application Firewall (WAF) program, including rule tuning, policy management, false-positive reduction, DDoS/bot mitigation, and protection of internet-facing and internal applications.
Direct the Public Key Infrastructure (PKI) practice, including certificate authority (CA) operations, certificate lifecycle management and automation, key management, HSM administration, TLS/mTLS standards, and code-signing services.
Evaluate and responsibly adopt evolving AI capabilities (e.g., generative AI, AI-assisted development, and AI-driven security tooling) to improve engineering productivity, threat detection, and operational efficiency, while managing associated security, privacy, and governance risks.
Maintain hands-on development experience with Java and Python programming languages, contributing to and reviewing code, prototypes, and automation to support engineering teams and technical decisions.
Focus on coordination with internal and external partners to deliver methods, procedures, practices, documents and results to increase reliability and usability of technology while optimizing costs and return on investment.
Deliver results based upon FINRA annual goals, department goals and management requests.
Direct and coordinate organization's financial and budget activities to fund operations, maximize investments, and increase efficiency for a program, project and/or practice area.
Provides leadership in technology best practices, including application security, cryptography, secure software engineering, cloud security, and responsible AI adoption best practices.
Analyze information and evaluate results to choose the best solutions and solve problems.
Support the evaluation of new technologies, techniques, and tools across WAF, PKI/cryptography, and associated AI.
Report status and issues to senior Technology management team.
Work directly with outside vendors to negotiate services and product agreements, including WAF, certificate authority, security, and AI security tooling providers.
Serve on as backup to more senior level management as needed.
Develop constructive and cooperative working relationships with peers both within and outside of Technology, and maintain them over time.
Contribute to the establishment, evolution and continued compliance with standard practices and processes within the disciplines.
Assist with adherence to technology policies and comply with all security controls, including cryptographic standards, certificate governance, cloud security controls, and AI usage policies.
Ensure all work products meets /exceeds FINRA standards and risks are effectively managed.
Participate in periodic Disaster Recovery (DR), Business Continuity Planning (BCP) and Sarbanes Oxley (SOX) testing and reporting, including certificate expiry, key recovery, and WAF failover scenarios.
Resource Management
Identify and hire resource/skills needed within their organization, including WAF engineers, PKI/cryptography specialists, software developers, and cloud security engineers.
Responsible…