Information & Security

The Information & Security team is responsible for security, infrastructure, operations, systems, and data to keep platforms protected, reliable, and scalable across eMoney.

View the Information & Security teams in Pingboard

IT Project Management

If you have a project request that requires 8+ hours of work for the IT group, please fill out the IT Project Request Form located here.

Questions? Contact Liz McCabe.

Security Operations

The Security Operations team is focused on protecting eMoney’s information assets and infrastructure from threats and vulnerabilities. Key responsibilities of this team include:

• Threat Detection: Continuously monitoring networks, systems, and applications for signs of malicious activity or security breaches.
• Incident Response: Developing and executing incident response plans to address security incidents promptly.
• Vulnerability Management: Regularly assessing systems for vulnerabilities and weaknesses, prioritizing them based on risk, and coordinating remediation efforts.
• Security Monitoring: Implementing ongoing surveillance of the organization’s IT environment to identify and respond to potential security threats in real-time.
• Forensic Analysis: Conducting investigations after a security incident to understand the nature and impact of the breach.
• Policy Enforcement: Ensuring compliance with security policies and standards through monitoring and enforcement measures.
• Threat Intelligence: Gathering and analyzing information about emerging threats and vulnerabilities from various sources to inform proactive security measures.
• Wombat Cybersecurity Training: Educating employees about security best practices, potential threats (like phishing), and the importance of following security policies.
• Collaboration: Working closely with other teams and business units to ensure a cohesive approach to security and to address security needs across the organization.

Application Security

The Application Security team focuses on protecting applications from security threats throughout their lifecycle, from design and development to deployment and maintenance. Key responsibilities of this team include:

• Threat Modeling: Identifying potential security threats and vulnerabilities during the application design phase to ensure they are addressed early in the development process.
• Secure Development Practices: Implementing secure coding standards and best practices to reduce the risk of vulnerabilities in the application code.
• Code Reviews: Conducting regular code reviews and static application security testing (SAST) to identify and remediate security flaws before deployment.
• Dynamic Application Security Testing (DAST): Testing running applications to identify vulnerabilities that can be exploited in real-time, often using automated tools.
• Penetration Testing: Performing simulated attacks on applications to evaluate their security posture and discover weaknesses that may not be identified through automated testing.
• Security Training: Providing training and resources for developers and other stakeholders to raise awareness of application security risks and promote secure coding practices.
• Security Policies and Standards: Developing and enforcing application security policies and standards to guide development teams and ensure compliance with regulations and industry best practices.
• Vulnerability Management: Continuously monitoring applications for new vulnerabilities and ensuring timely patches and updates are applied to mitigate risks.
• Access Control and Authentication: Implementing strong access controls, authentication mechanisms, and encryption to protect sensitive data within applications.
• Incident Response: Preparing for and responding to security incidents involving applications, including analyzing breaches and coordinating remediation efforts.

Risk Management

The Risk Management team at eMoney is dedicated to safeguarding the organization’s information assets by identifying, assessing, and prioritizing security risks. This involves conducting thorough risk assessments and implementing effective mitigation strategies.

Key responsibilities include:

• Risk Assessment:  Regularly conducting assessments to identify potential risks to IT assets, such as data breaches, system failures, and compliance issues.
• Risk Analysis: Evaluating the likelihood and potential impact of identified risks to prioritize them and determine appropriate responses.
• Risk Mitigation Strategies: Developing and implementing strategies to mitigate identified risks, which may include technical controls, policy changes, or user training.
• Compliance Monitoring: Ensuring adherence to relevant regulations and standards by regularly reviewing policies and practices.
• Incident Response Planning: Creating and maintaining incident response plans to effectively address security breaches or other IT incidents, including roles, responsibilities, and communication protocols.
• InfoSec Vendor Management Reviews: Overseeing relationships with third-party vendors and service providers to guarantee they provide high-quality products and services. Evaluating the security documentation of our third-party vendors.
• Privacy Reviews: Assessing privacy impact evaluations for vendors who access, process, or store personal information (PI) of our employees, clients, or advisors.
• Monitoring and Reporting: Continuously monitoring risk factors and security controls, and providing regular reports to management on the risk landscape and mitigation efforts.
• Stakeholder Engagement: Collaborating with other departments (such as legal, compliance, and operations) to ensure a comprehensive approach to risk management across the organization.
• Training and Awareness: Developing training programs to educate employees about risk management practices, security policies, and how to recognize potential threats.
• Business Continuity Planning: Assisting in the development of business continuity and disaster recovery plans to ensure critical operations can continue in the event of a disruption.
• Continuous Improvement: Regularly reviewing and updating risk management processes and policies based on evolving threats, technologies, and business objectives.

Production Operations (ProdOps)

The ProdOps team helps keep eMoney’s technology running smoothly behind the scenes. They work closely with Development, Architecture, Security, Client Implementation, and Technical Support to support reliable systems and strong operational practices.

With deep expertise in our infrastructure – like servers, storage, and databases – ProdOps guides development teams in building and maintaining stable, resilient services. Their work helps ensure the eMoney platform remains secure, dependable, and ready to support our clients every day.

Key responsibilities include:

• Partnering with Development to implement operational practices and improve automation.
• Serving as a contracting-style resource to assist Development Teams with operational needs related to infrastructure, servers, and services.
• Providing production support in conjunction with Development, Security, and Technical Support.
• Creating and maintaining operational documentation and sharing best practices across teams.
• Granting tooling access for new Development Team members across environments.
• Supporting business operations and service integrations into the eMoney ecosystem.
• Monitoring availability, performance, and SLAs to ensure reliability and accountability.
• Working with Security to assist them with providing and enforcing policies and best practices for:
  • Authentication and access
  • PII handling
  • Server hardening (strengthening eMoney’s server’s defense)

Networking & Systems

The Networking & Systems team is comprised of two groups:

• Networking and Systems Administration
• Corporate Operations (CorpOps)

Networking and Systems Administration

Our Network Engineers design, secure, and maintain the corporate network to ensure reliable connectivity for employees and systems across offices, remote environments, and cloud platforms. They manage performance, troubleshoot issues, and implement best practices to keep our network resilient and secure.

Our Systems Administrators ensure the stability and security of our IT infrastructure. They manage servers, identity and access systems, collaboration tools, and endpoint security, while overseeing updates, backups, and disaster recovery. Together, these teams keep our core technology running smoothly so employees can focus on delivering for our clients.

Corporate Operations (CorpOps)

CorpOps manages the employee-facing IT services and infrastructure that keep our workforce connected, secure, and productive. CorpOps ensures employees have the tools, access, and support they need to do their jobs every day.

Key responsibilities include:

• Device & Endpoint Management: Procuring, configuring, and maintaining laptops, desktops, and mobile devices.
• Collaboration Tools: Supporting platforms like Microsoft 365, Zoom, and Slack to enable communication and teamwork.
• Network & Connectivity: Maintaining secure, reliable access to corporate networks, VPNs, and Wi-Fi.
• Identity & Access Management: Managing user accounts, SSO, MFA, and secure authentication processes.
• Help Desk & User Support: Providing day-to-day technical support, troubleshooting, and training for employees.
• Security & Compliance: Enforcing IT security best practices across endpoints, including patching, updates, and policy adherence.
• Monitoring & Maintenance: Ensuring system availability, performance, and reliability for employee-facing IT.
• Vendor & License Management: Overseeing hardware, software, and service providers that support employee technology.

To request support from CorpOps for any of the items listed above, head over to the Service Portal and visit the CorpOps Systems section located on the dashboard.

For urgent matters, send a message to the team in the CorpOps Teams room.

Information Systems

The Information Systems team designs, develops, and maintains custom software applications tailored to eMoney’s unique business needs. By collaborating closely with stakeholders and other Information & Security teams, they ensure systems are reliable, secure, and aligned with organizational goals.

Key responsibilities include:

• Requirements Gathering – Partnering with stakeholders to understand business needs and define technical requirements.
• System Design – Creating architectural designs that align with organizational standards and best practices.
• Development – Building, testing, and deploying new applications and features.
• Maintenance & Support – Providing ongoing support, troubleshooting, and enhancements for existing systems.
• Integration – Ensuring seamless data exchange and workflow efficiency across applications and databases.
• Quality Assurance – Conducting testing to confirm applications meet quality, security, and performance standards.
• Collaboration – Working with Information & Security teams to align systems with enterprise-wide technical and security requirements.

Critical/Production Issues

Please use the IS Production Support Teams Room  for any immediate, critical production support issue (e.g. system outages, broken functionality, missing data) that immediately impacts clients or ability to execute necessary business workflows.

Severity Level Incident Assessment (Sev1, Sev2, NonSev, etc.)

• Response time will be ~20 minutes.
• Based on the affected system and the SevLevel assessment, the team will define the SLA time within which the team will work to resolve the production support/issue outage.
  • In the event of a Sev1 determination, the IS&D team will kick off an Everbridge call tree workflow which will notify the appropriate business stakeholders and assemble the appropriate incident response team.

Enterprise Systems

The Enterprise Systems team manages and supports eMoney’s core systems and applications, ensuring our technology infrastructure runs smoothly and effectively supports business operations. The team works across the organization to deliver reliable, integrated solutions that enable efficiency and growth. Unlike Corporate Operations (CorpOps), which supports employee-facing IT needs (e.g., laptops, networks, and collaboration tools), Enterprise Systems focuses on enterprise-wide platforms and applications that power our business processes.

Key responsibilities of this team include:

• System Integration – Connecting platforms like Salesforce, Looker, and DocuSign to streamline data flow and business processes.
• Application Development & Maintenance – Building, customizing, and maintaining enterprise applications, including updates and patches.
• User Support & Training – Troubleshooting issues and helping employees use systems effectively.
• Performance Monitoring – Proactively tracking system health to resolve issues and minimize downtime.
• Data Management – Safeguarding data integrity, security, and backups to ensure compliance and protection.
• Project Management – Leading system upgrades, migrations, and new implementations.
• Strategic Planning – Partnering with business units to align technology solutions with organizational goals.
• Vendor Management – Overseeing third-party vendors and service providers to ensure quality delivery.

Supported Systems

This team owns and administers the following systems/platforms – all of which have a dedicated channel I the IS Production Support room linked above.

• Salesforce
• Zuora
• Eloqua
• SumTotal
• Looker
• Docusign
• Outreach
• Seismic
• Gong
• Discovery
• CyberSource/Avalara

Enterprise Data & Analytics

The Enterprise Data & Analytics team drives strategy, governance, and innovation to ensure data is a trusted asset that delivers measurable business value. We partner across the organization to make data accessible, reliable, and actionable – supporting better decision-making and long-term growth.  Key responsibilities of this team include:

• Data Strategy:  Defining the vision and roadmap for how data supports business priorities and drives innovation.
• Data Governance: Establishing standards, policies, and practices that ensure data quality, security, and compliance.
• Architecture & Engineering: Designing and maintaining scalable, modern data platforms and integrations that power analytics.
• Value-Driven Analytics: Delivering insights, dashboards, and reporting that help teams identify opportunities, solve problems, and create client and business impact.