Serve as the primary risk partner and advisor to senior business and technology leaders.
Develop and maintain a consolidated risk profile that connects disparate risk signals into a coherent narrative.
Influence strategy, investment decisions, and delivery roadmaps regarding risk considerations.
Provide cybersecurity risk leadership for enterprise platforms.
Maintain hands‑on cybersecurity expertise and serve as the primary cybersecurity risk authority.
Lead high-impact cyber risk discussions with technology teams.
Translate high-severity cybersecurity findings into clear business impact for senior leaders.
Operate as a second line of defense function, providing independent oversight and guidance.
Requirements
10+ years of experience in cybersecurity, technology risk, operational risk, or related disciplines within a large, complex organization.
Demonstrated deep cybersecurity expertise equivalent to a Business Information Security Officer, Security Risk Lead, or similar senior cyber risk role.
Proven experience operating in or alongside a second line of defense function within a Three or Four Lines of Defense model.
Ability to engage credibly with senior engineers, architects, and security teams while maintaining independence from first‑line delivery ownership.
Strong executive communication skills with the ability to translate technical risk into business impact.