Job Description
Cybersecurity Knowledge
\n
· Demonstrated experience leading cybersecurity, cyber risk, governance, remediation, vulnerability management, or security program-management work.
\n
· Strong understanding of cyber threats, adversary behavior, attack paths, security controls, and risk-based decision-making.
\n
· Working knowledge of Red Team operations, threat intelligence, vulnerability management, control validation, and the MITRE ATT&CK framework.
\n
· Ability to engage credibly with security engineers and technical subject-matter experts without serving as the primary hands-on analyst.
\n
Program & Governance Experience
\n
· Experience building or maturing governance programs, operating models, policies, standards, procedures, and reporting frameworks.
\n
· Experience managing cross-functional initiatives, competing priorities, risks, dependencies, and executive stakeholders.
\n
· Knowledge of cyber risk management, remediation tracking, assurance practices, evidence validation, and metrics development.
\n
· Demonstrated ability to take a process from concept through implementation and continuous improvement.