Associate Director IT Risk and Security Management
DTCC
Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.
The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.
Pay and Benefits:
- Competitive compensation, including base pay and annual incentive
- Comprehensive health and life insurance and well-being benefits, based on location
- Pension / Retirement benefits
- Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
- DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).
Knowledge Sharing: Collaborate with IT, risk, and cybersecurity teams, contribute to documentation, and participate in technical workshops and team reviews to expand your expertise Be part of a team committed to innovation, operational excellence, and professional development.
Over time, you will have the opportunity to cross-train in other IAM tools and technologies, including Active Directory, HashiCorp Vault, Terraform, Ansible, PKI/HSM, and Identity Governance platforms.
We’re seeking a hands-on, detail-oriented Senior/Lead PAM Systems Engineer who combines technical expertise with operational leadership.
You’ll also have opportunities to cross-train and guide adoption across complementary IAM technologies.
you will also be building PQC inventory dashboards that turn raw cryptographic metadata into actionable insights for decision-makers.
Implement data quality controls, refresh schedules, row‑level security, and audit-ready export (CSV/PDF) for governance and reporting.
Key Responsibilities
- Design and implement systems that discover, classify, and track certificates, keys, and cryptographic protocols across endpoints, servers, and network paths.
- Develop certificate lifecycle management processes for accurate tracking of issuance, renewal, and expiration.
- Integrate with endpoint detection and network topology data to identify ingress/egress points and crypto exposure.
- Build robust data pipelines aggregating telemetry from PKI systems, network scans, EDR, and cloud APIs.
- Model and analyze data using SQL and BI dashboards for leadership and auditors.
- Collaborate with platform and security teams to align inventory outputs with risk assessments and PQC migration plans.
- Define standards for crypto asset discovery and data quality metrics.
- Continuously improve inventory coverage and reporting automation.
Required Skills
- Leadership experience managing technical teams.
- Strong PKI concepts (certificate structures, trust chains, lifecycle principles).
- Data engineering and pipeline development experience.
- SQL and BI dashboarding proficiency.
- Scripting for data collection and transformation (Python, PowerShell).
- Networking fundamentals: topology, ingress/egress, endpoint detection.
- Security mindset: cryptographic protocols, crypto agility, PQC readiness.
- Work experience in any of the cloud platform is preferable.
KPIs & Success Metrics
- Inventory Coverage: % of endpoints, servers, and network segments scanned and tracked.
- Certificate Lifecycle Compliance: SLA adherence for renewal and expiration alerts.
- Data Quality: Accuracy and completeness of crypto asset records (target >95%).
- Dashboard Adoption: Number of stakeholders actively using BI dashboards for decision-making.
- Reporting Timeliness: Ability to produce audit-ready inventory reports within defined timeframes.
- Risk Reduction: Measurable decrease in expired or weak certificates across the environment.
Qualifications:
- Minimum of 8 years of related experience
- Bachelor's degree preferred or equivalent experience
DTCC proudly supports Flexible Work Arrangements favoring openness and gives people freedom to do their jobs well, by encouraging diverse opinions and emphasizing teamwork. When you join our team, you’ll have an opportunity to make meaningful contributions at a company that is recognized as a thought leader in both the financial services and technology industries. A DTCC career is more than a good way to earn a living. It’s the chance to make a difference at a company that’s truly one of a kind.
Learn more about Clearance and Settlement by clicking here.
IT Risk and Data Services department seeks to meet our clients’ needs by capitalizing on the progress made in both the Risk Technology Program and the Data Analytics work and driving adoption of these capabilities across the enterprise. Important initiatives like the Modernization and Resiliency Programs count on these foundational capabilities to succeed.
The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.