Workplace Security EngineerLead-Vice President-Systems Engineering

The Workplace Engineering organization is responsible for designing securing and operating the firms digital workplace platforms including cloudhosted desktops endpoint management identity services productivity and collaboration services and data security and compliance capabilities.

Within this organization Workplace Security Engineering partners closely with Technology Risk Cyber Security and Audit teams to ensure workplace platforms are secure by design compliant with firm standards and able to meet regulatory and audit expectations throughout their lifecycle.

We are seeking a Workplace Security Engineer to focus on security architecture control design and risk governance for modern workplace environments including cloud desktop platforms cloud identity services endpoint management and information protection and compliance tooling.

This role sits at the intersection ofsystem engineering security architecture and technology risk. The successful candidate will translate risk and control requirements into practical platform designs lead security design reviews and approvals and ensure workplace solutions are delivered with clear control ownership traceability and auditready evidence.

The role works closely with Technology Risk(TR) enterprise security teams and platform engineers to support architecture reviews risk assessments control attestations and remediation activities across both onpremise and cloudhosted workplace environments.

• Act as a security design authority for digital workplace platforms including cloud desktops cloud identity endpoint management and cloud productivity services
• Define and review security reference architectures control patterns and guardrails for endpoint identity access data protection and compliance capabilities
• Ensure platform designs align with firm security standards zero trust principles and regulatory requirements
• Assess new workplace capabilities and architectural changes for security risk and control impact

• Partner closely with Technology Risk Management to:
  • Support architecture and design reviews
  • Contribute to risk assessments and threat modeling
  • Respond to risk challenge control testing and remediation planning
• Own or contribute to formal security design approvals for new or materially changed workplace solutions
• Translate highlevel policies and risk statements into implementable and testable technical controls

• Ensure workplace security controls are:
  • Designed intentionally (not implicit)
  • Implemented consistently
  • Measurable and defensible under audit
• Produce and maintain control documentation including:
  • Architecture diagrams
  • Control narratives
  • Supporting technical evidence
• Support audit regulatory and compliance activities including walkthroughs and evidence requests
• Partner with engineering teams to close control gaps and risk findings

• Govern secure design of:
  • Cloudmanaged endpoint onboarding and configuration
  • Identitycentric access controls and device trust signals
  • Data classification retention eDiscovery and data loss prevention
• Ensure consistent application of hardening standards configuration baselines and policy enforcement across physical virtual and cloud desktops
• Review integrations between workplace platforms and downstream services from a security and datahandling perspective

• Work across Workplace Engineering Cyber Security Technology Risk and Audit teams
• Act as a trusted advisor to platform and product owners
• Communicate complex technical and risk concepts clearly to technical risk and executive stakeholders

• 410 years of experience in workplace engineering security engineering platform security or riskaligned engineering roles
• Strong experience with Windowsbased desktop environments including cloudhosted or virtual desktop models
• Proven experience working with Technology Risk Audit or Governance teams
• Strong understanding of security control design (preventive detective corrective)
• Experience creating architecturegrade and auditready documentation
• Excellent written and verbal communication skills

• Experience securing cloudhosted digital workplace platforms
• Strong familiarity with:
  • Cloud identity and access management models
  • Endpoint management and configuration enforcement
  • Information protection data governance and compliance tooling
• Experience supporting regulated environments with formal risk and audit processes
• Understanding of zero trust and identitycentric security architectures
• Ability to balance engineering pragmatism with risk discipline

• Workplace platforms are delivered with approved security architectures
• Technology Risk teams have confidence in control coverage and implementation
• Audit and regulatory interactions are supported by clear defensible evidence
• Engineering teams receive practical designtime security guidance
• Security and risk considerations are embedded early and consistently