Job Description
The Director, Security Enablement leads the operating cadence, security metrics, executive reporting, risk coordination, and cross-functional programs that support Security across the Financial Services and Data (FSD) business unit. You will be a key liaison to the Global Security Office and turn security data and risk information into clear priorities and decisions.
This is a business-unit execution role rather than a hands-on engineering position. You will report to the Senior Director.
You'll have the opportunity to:
- Lead weekly and monthly security operating reviews, scorecards, dashboards, and executive reporting.
- Define and maintain security KPIs and KRIs, including data quality, ownership, thresholds, trends, and reporting cadence.
- Coordinate security risks, issues, and deviations in Archer, ensuring clear ownership, remediation plans, target dates, aging, and escalation.
- Track AWS security posture and migration-related risk by consolidating cloud security findings into governance metrics and leadership reporting.
- Be a primary liaison across Security, Engineering, Application Security, Legal, the Global Security Office, and business leaders on standards, risk visibility, and escalations.
- Coordinate security communications and program execution, including awareness, policy, and leadership updates.
- Manage security vendor Proof of Value (PoV) tracking and Security FinOps reporting, including evaluation status, tooling spend, license utilization, renewals, and budget variance.
- Translate security activity, trends, and risk into clear decision support for prioritization, investment, remediation, and escalation.
- Stay current on emerging AI and security trends, including relevant AI tools, use cases, risks, and security considerations.
Qualifications
Your background:
- 10+ years of experience in cybersecurity, security program management, security governance, technology risk, or a related field.
- 5+ years of people leadership experience.
- Bachelor's degree in Cybersecurity, Information Systems, Business, or a related field, or equivalent practical experience.
- Experience with enterprise GRC/IRM platforms such as RSA Archer for risk, issue, deviation, workflow, or reporting processes.
- Experience running recurring security operating reviews, action tracking, executive reporting, and KPI/KRI dashboards.
- Working knowledge of AWS security fundamentals, such as IAM, Security Hub, Config, WAF, or equivalent, to report on cloud risk.
- Experience working within 1LOD/2LOD risk models and coordinating programs across multiple business units in a matrixed environment.
- Experience presenting to senior leadership.
- Experience with security vendor evaluations, CSPM/CNAPP, AppSec, DSPM, Security FinOps, or certifications such as CISM, CRISC, CISSP, or AWS Certified Security - Specialty preferred.
Additional Information
Benefits/Perks:
- Great compensation package and bonus plan.
- Core benefits including medical, dental, vision, and matching 401K.
- Flexible work environment, ability to work remote, hybrid or in-office.
- Flexible time off including volunteer time off, vacation, sick and 12-paid holidays.