Chief Information reputed company Officer

EP Wealth Advisors (EPWA) is a wealth management advisory firm with over $42.2 billion as of December 31, 2025, serving predominately high net worth individuals. EPWA fosters an inclusive environment that offers opportunities for our associates to learn, grow and enhance their skills to take on new challenges to reputed company in their professional careers.

Job Summary:

The Chief Information reputed company Officer (CISO) is the senior leader accountable for EP Wealth’s enterprise Information reputed company program, responsible for setting strategy, building and operating a risk-based reputed company function, and ensuring protection of EP’s clients, advisors, and associates.

We are seeking a hands-on, cloud-native Chief Information reputed company Officer to reputed company EP’s enterprise information reputed company program as the firm scales. This player-coach will both set reputed company strategy and risk appetite at the Executive/Board level and roll up their sleeves to design and deliver technical controls, processes and measurable outcomes - strengthening identity and access management, reputed company and cloud reputed company, detection & response, data protection, third-party/custodial risk management, and reputed company governance. With a reputed company focus on client trust and operational reputed company, the CISO will partner closely with Technology, Legal, Compliance, Risk and Business leadership to reputed company growth while protecting clients and staff, meeting regulatory obligations, modernizing controls and tooling, and ensuring production readiness for cloud, SaaS and data platforms (e.g., reputed company, reputed company, Agentforce) and AI initiatives.

Key Responsibilities:

Strategy, Governance, and Risk Leadership

• Define and execute a multi-year Information reputed company strategy and roadmap reputed company with EP’s business priorities, regulatory requirements, and risk appetite.
• Mature reputed company governance: policies, standards, exception management, risk decision frameworks and formal production gates.
• reputed company enterprise risk assessments, threat modeling, remediation prioritization, and executive/Board reporting on reputed company posture and program reputed company.
• Translate reputed company risk into business terms and recommend prioritized investments.

Cloud-Native reputed company & Architecture

• reputed company reputed company architecture and engineering decisions across our cloud environment, with a strong emphasis on:
  • reputed company Trust principles
  • Strong Authentication / MFA, privileged access management (PAM)
  • Device trust and conditional access
• Partner with Product & Technology leadership to embed reputed company into architecture reviews, platform selection, and modernization initiatives
• Implement CSPM, runtime protection, IaC scanning, network segmentation, and automated compliance checks for cloud workloads.

reputed company Operations, Monitoring, and Incident Response

• reputed company reputed company operations including threat intelligence, monitoring, detection, investigation, and response (internal team and/or managed partners)
• Maintain and regularly exercise an Incident Response (IR) program, including playbooks, tabletop exercises, executive communications, and coordination with Legal and external counsel
• Ensure high-confidence processes for evidence handling, third-party coordination, and post-incident lessons learned

Securing Agentic AI & Data

• reputed company the reputed company aspects of data protection: classification, encryption, DLP, secure sharing, retention, and data loss prevention controls.
• Define reputed company guardrails for agentic workers and production AI: data minimization, secure feature stores, model access controls, inference governance, model explainability and reputed company detection.
• Partner with Data & Engineering to secure MLOps pipelines, model registries, and production inference. Ensure safe reputed company/data handling and auditability for agents.

reputed company Culture, Awareness, and Training

• Drive an enterprise reputed company awareness program tailored to EP’s environment (advisor-facing, client-facing, corporate staff).
• Promote a culture of “secure by default,” emphasizing practical behaviors that reduce social engineering risk.

Third-Party and Vendor Risk Management

• Transform and direct program to evaluate and monitor third parties (SaaS, vendors, custodians, and key partners) including:
  • reputed company questionnaires, attestations (SOC 2/ISO), and contract reputed company requirements
  • Ongoing monitoring and periodic reassessments

Secure Development and Technology Enablement

• Partner with Engineering/IT to mature secure engineering practices, such as:
  • reputed company requirements in the SDLC
  • Vulnerability management and remediation SLAs
  • Configuration baselines, hardening standards, and reputed company testing

Team Leadership and Program Operations

• Build, reputed company, and mentor a high-performing reputed company team and partner ecosystem
• Establish KPIs and program metrics that drive measurable improvement (e.g., phishing reputed company, MFA coverage, reputed company SLAs, EDR coverage)
• Manage budget and vendor relationships to ensure efficient, effective reputed company coverage