Jason Novak

As Head of Information and Security, Jason leads a team responsible for all information systems, management, and processing within eMoney, working to maintain the confidentiality, integrity and availability of organizational data. In addition to leading corporate operations, production operations, and security, Jason oversees enterprise applications, risk, and privacy initiatives.

Jason joined eMoney in 2014, previously serving as senior vice president of security and IT operations and director of security. With more than 20 years of information technology and security experience, he relies on diversified technical knowledge and training in numerous aspects of information technology and security, including IT infrastructure design and operations, cyber security, vulnerability assessments, penetration testing, social engineering, IT audit, risk management, compliance, quality assurance, business continuity, and disaster recovery. He’s also proficient in AICPA SOC 2 compliance, Payment Card Industry (PCI) Data Security Standards, and various NIST and ISO information technology frameworks.

Additionally, Jason is Certified in Risk and Information Systems Control (CRISC) and is a Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), and Certified Information Security Manager (CISM). He is a member of the Information Systems Audit and Control Association (ISACA) and International Information Systems Security Certification Consortium, Inc. (ISC)². He is a graduate of Muhlenberg College.

What was the best piece of advice about money you were given at an early age?

Start investing into your 401k (or something similar) as early as possible and max out the contributions.  Buy low, sell high!

What’s your favorite thing about helping people talk about money?

Leveraging various technology platforms and solutions to help them achieve their financial goals.  In addition, I’ll always want to discuss the steps and processes you can take to secure your investments with regards to cyber-attacks and fraudulent activities.