Director, Global Cybersecurity Risk Management
| Verified Pay check_circle | Provided by the employer$250000 - $285000 per year |
|---|---|
| Hours | Full-time |
| Location | New York, NY 10036 New York, New York open_in_new |
About this job
Job Description
Provide strategic leadership and oversight of cybersecurity risk management, ensuring alignment with the company's Enterprise Risk Management (ERM) Framework, risk appetite, and business objectives across global operations.
Leverage prior hands-on technical cybersecurity experience with firewalls, endpoint security, network security, intrusion detection and prevention systems, and other security technologies to assess control effectiveness and guide risk mitigation strategies.
Establish, maintain, and enhance global cybersecurity risk governance frameworks, policies, standards, and controls to identify, assess, monitor, and mitigate enterprise-wide cyber risks across regions and business units.
Partner with global executive leadership, IT, Information Security, Compliance, Legal, and business stakeholders to communicate cyber risk exposure, emerging threats, control gaps, and mitigation priorities.
Present cybersecurity risk assessments, key risk indicators (KRIs), remediation progress, and risk exposure to senior executives, global risk committees, and other governance forums, demonstrating strong executive presence and communication skills.
Oversee cybersecurity risk assessments, vulnerability management, endpoint protection, firewall configurations, security control testing, and remediation initiatives, ensuring consistent execution and accountability across global environments.
Drive continuous improvement of the global cybersecurity risk management program by incorporating evolving threat landscapes, international regulatory requirements, industry standards, and lessons learned from security incidents.
Lead and influence cross-functional, geographically dispersed teams to strengthen cybersecurity risk ownership, promote consistent security practices, and foster a strong global risk culture while translating complex technical risks into actionable business decisions.