• Define and maintain security standards and guardrails, including gold standards, reference configurations, templates, and advises on architectural patterns.
• Provides security guidance and contributes to designs, reviewing solutions, identifying gaps and compensating controls, influencing strategy, and escalating high‑risk designs as needed.
• Translate and extend enterprise data security controls and classification frameworks from unstructured to structured data platforms, ensuring consistent protection across databases, warehouses, and analytics environments.
• Drive validation and adoption of controls, including documentation of behavior and integrations, proof‑of‑concepts or pilots, and support for remediation of security and compliance gaps.

• 7+ years of experience in data security, cybersecurity engineering, or cloud security roles.
• Hands‑on experience in data security engineering within a financial services environment (preferred).
• Experience supporting audits, risk assessments, and regulatory examinations.
• Understanding of identity‑centric and behavior‑based security models, including Zero Trust principles, identity‑aware data access, privileged‑user monitoring, insider‑threat detection, UEBA, anomaly detection, and SIEM/SOAR integrations.
• Hands‑on experience designing, implementing, and operating data security controls across structured data environments, including Database Activity Monitoring (DBAM), data discovery and inventory, data access governance, CASB, DLP, and DSPM capabilities.
• Strong expertise in data protection mechanisms such as encryption (at rest, in transit, and field‑level), tokenization, masking, anonymization, row‑level security, and sensitive data classification, labeling, and label propagation.
• Experience securing modern data platforms and pipelines, including relational and cloud‑native databases, data warehouses/lakehouses, and structured ETL/ELT workflows, ensuring protection of data‑at‑rest and data‑in‑motion across on‑prem, cloud, and hybrid environments.
• Ability to drive enterprise wide projects that extend Zero Trust and identity‑aware access principles to data, integrating IAM controls, privileged user monitoring, and policy enforcement with SIEM/SOAR workflows.
• Ability to drive enterprise‑scale adoption of data security controls and policies, including extending governance frameworks to emerging use cases such as machine learning and large language model (AI) systems
• Familiarity with GLBA, SOX, FFIEC, and NYDFS 500 regulatory requirements.
• Knowledge of NIST SP 800‑53 and the NIST Cybersecurity Framework (CSF).
• Ability to communicate complex technical concepts and risks to non‑technical stakeholders, translating technical issues into clear business impacts.
• Ability to partner with adjacent security domains (e.g., unstructured data security, DLP, DSPM) to ensure consistent policy application and to translate control requirements across data types and environments.

**Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday.**

Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.