The candidate should bring a solutions-oriented, investigative mindset, comfort in a fast-paced environment, and the ability to build strong relationships across Technology and relevant business functions.
Vulnerability Management (Hands-On Execution)
Conduct regular vulnerability assessments of all systems, applications, and infrastructure
Execute vulnerability scans using tools such as Nessus, Qualys, or Rapid7; perform or coordinate penetration testing and security assessments.
Analyze vulnerability data and issue actionable remediation, mitigation, or risk-acceptance recommendations calibrated to the firm's risk profile.
Drive remediation directly with engineering, infrastructure, and application teams - tracking findings from discovery through to validated closure.
Validate all remediations to confirm findings are fully resolved.
Develop and maintain meaningful vulnerability metrics and dashboards for senior leadership, incorporating risk-based scoring, SLA adherence, and trend analysis.
Work with cross-functional teams to embed vulnerability management considerations into the design, development, and testing of new systems and applications.
Coordinate with external vendors and partners to optimize detection quality, validate findings, and improve remediation workflows.
Program Management & Governance
Develop and maintain security policies, procedures, and standards aligned to industry best practices (NIST, CIS, ISO) and PJT policy requirements.
Support audit evidence collection and manage remediation timelines for compliance-related findings.
Communicate security risks and program status to management and stakeholders; provide clear, prioritized recommendations.
Understand and effectively balance risk versus business operability in all remediation decisions.
Provide leadership and mentorship to junior security team members; manage and direct external teams as needed.
Engineering
Support and maintain the vulnerability management platform infrastructure, including scanner and agent configuration, and integration with downstream ticketing and reporting systems.
In support of the overall PJT security program, assist with project work on security infrastructure, including SIEM, EDR, and related tooling - contributing engineering effort as priorities require.
Requirements
PJT Partners seeks to hire individuals who are highly motivated, intelligent and have demonstrated excellence in prior endeavors. In addition, qualified candidates will possess the following:
Education
Benefits
Equity / stock options
Additional Information
PJT Partners is a global advisory-focused investment bank. Our team of senior professionals delivers a wide array of strategic advisory, shareholder advisory, restructuring and special situations and private fund advisory and placement services to corporations, financial sponsors, institutional investors and governments around the world. We offer a unique portfolio of advisory services designed to help our clients achieve their strategic objectives. We also provide, through PJT Park Hill, private fund advisory and fundraising services for alternative investment managers, including private equity funds, real estate funds and hedge funds.
From the beginning, PJT Partners has firmly believed that having the best people is key to building an enduring franchise. Our perspective was, and remains, that a great team brings in both top tier clients and appeals to a wide-range of diverse, talented colleagues. Fostering an inclusive culture, which welcomes differing perspectives and beliefs, enables us to provide the best advice and insights to our clients.
To learn more about PJT Partners, please visit our website at www.pjtpartners.com .
Pjtpartners · NY