Senior Director, Information Security Manager (Cyber GRC Controls Risk Management)

Responsibilities: Oversee cyber and technology risk across control domains and identify emerging risk themes Assess control performance and remediation status to gauge risk exposure Govern issue management from identification to closure, including escalation and aging Create aggregated risk views, KRIs, and governance materials for senior oversight Monitor control deficiencies, exception aging, and residual risk movements Collaborate with continuous monitoring teams to leverage automated evidence across identity, cloud, endpoint, network, and vulnerability domains Support governance for high-priority remediation actions and control improvements Challenge platforms and control owners on remediation quality, timelines, and root causes Establish trigger-based governance tied to material risk movement and resilience gaps Coordinate audits, incidents, regulatory reviews and control failures impact on risk posture Contribute to cross-Platform visibility of dependency risk and resilience readiness Support concise, decision-focused management reporting aligned to enterprise governance

Key requirements: Bachelor's degree in Computer Science or related discipline; equivalent work experience considered 15+ years of information security or related technology experience Significant experience in cyber risk management, control oversight, issue management, or technology controls Strong understanding of cyber control monitoring and risk reporting practices Ability to independently challenge stakeholders and synthesize risk insights for leadership Excellent analytical, governance, and problem-solving capabilities Excellent communication skills with experience preparing senior-level reporting Analytical thinking Strong communication Ability to challenge stakeholders Continuous control monitoring Automated evidence models Risk reporting and KRIs