Job Description

ENTERPRISE CYBERSECURITY LEADERSHIP ROLE

Purpose of the Role

We are seeking a senior cybersecurity leader to build, lead and scale a differentiated Cyber Advisory, Risk and Compliance practice. The leader will combine broad cyber-domain knowledge with deep expertise in governance, risk, compliance and executive advisory. The role spans market development, client leadership, solution innovation, complex transformation delivery, talent development and alliance-led growth.

The successful candidate will engage CISOs, CIOs, CROs, Chief Compliance Officers, business executives and boards to translate cyber risk into business decisions. They will shape multi-year transformation agendas, guide clients through regulatory and technology change, and connect strategy with implementation across platforms such as ServiceNow, Archer and other GRC, security and resilience technologies.

͏

Leadership Scope

Own the Cyber Advisory, Risk and Compliance strategy, portfolio roadmap, go-to-market plan, pipeline and financial performance.

Provide senior leadership across cyber strategy, enterprise risk, regulatory compliance, security governance, digital trust, operational resilience and security transformation.

Lead executive-level client relationships, board and C-suite workshops, risk committee engagements and strategic account growth.

Build and govern a global delivery model spanning advisory consultants, risk specialists, architects, platform teams and managed services.

Create repeatable offerings, methods, accelerators and intellectual property that connect advisory outcomes to implementation and run-state services.

Act as the senior escalation point for complex programs, ensuring quality, commercial discipline, risk management and client satisfaction.

Key Responsibilities

1. Cyber Advisory and Executive Engagement

Advise senior stakeholders on cyber strategy, target operating models, investment prioritization, cyber risk quantification, security transformation and board reporting.

Lead current-state assessments, maturity reviews, control optimization, roadmap development, business cases and multi-year transformation programs.

Translate technical exposure, threat intelligence and control performance into clear business-risk and investment decisions.

Facilitate executive workshops and build trusted relationships that position the organization as a long-term strategic partner.

͏

2. Risk, Compliance and Resilience

Lead enterprise and technology risk programs covering governance, policy, controls, compliance, third-party risk, operational resilience and business continuity.

Guide clients on major frameworks and regulations, including NIST CSF, ISO/IEC 27001, ISO 22301, COBIT, CIS Controls, PCI DSS, SOX, GDPR, DORA and sector-specific requirements.

Design continuous compliance, automated control testing, integrated assurance, risk analytics and executive reporting models

Oversee third-party risk management across lifecycle governance, inherent risk, due diligence, continuous monitoring, remediation and concentration risk.

3. Broad Cyber Domain Leadership

Provide informed leadership across cloud security, identity and access management, data protection, application security, vulnerability management, threat detection and response, security operations, OT/IoT security and AI security.

Connect advisory recommendations with architecture, engineering, platform implementation, managed security services and measurable control outcomes.

Challenge and validate solution designs to ensure business alignment, regulatory defensibility, interoperability and sustainable operating models.

Technical risk assessments and architecture reviews

͏

4. Technology-Enabled Transformation

• Shape transformations using ServiceNow Integrated Risk Management, Third-Party Risk Management, Business Continuity Management, Security Incident Response, Vulnerability Response and AI governance capabilities.


• Provide functional and strategic oversight for GRC platforms including ServiceNow, Archer and adjacent risk, compliance, security and analytics technologies.


• Drive platform-led operating models, workflow automation, control telemetry, AI-assisted advisory and outcome-based services rather than isolated tool implementations.


• Ensure business requirements, control objectives and risk use cases are translated into scalable platform designs and adoption roadmaps.

5. Growth, Portfolio and Alliance Leadership

• Lead strategic pursuits, RFP responses, solution shaping, executive presentations, commercials and deal governance for complex cyber opportunities.


• Develop market-facing propositions, thought leadership, webinars, analyst content, client roundtables and industry points of view.


• Build joint offerings and go-to-market motions with technology alliances while preserving client outcomes, delivery accountability and commercial clarity.


• Own portfolio metrics including revenue, margin, pipeline, win rate, utilization, client satisfaction, quality and recurring-services growth.

6. Delivery Excellence and Talent

• Establish delivery governance for large, multi-country and multi-workstream programs, including scope, dependencies, quality, risk and executive reporting.


• Build a high-performing leadership bench and multidisciplinary team of cyber advisors, risk consultants, architects and delivery leaders.


• Coach senior practitioners, define career paths and certification priorities, and create communities of practice across cyber domains.


• Maintain zero-surprise governance, intervene early on delivery risks and ensure lessons learned are embedded into methods and offerings.

͏

Required Experience and Qualifications

• 15+ years of progressive cybersecurity, risk, compliance or technology consulting experience, including significant senior leadership responsibility.


• Demonstrated success leading a Cyber Advisory, Risk, Compliance, Security Transformation or equivalent portfolio in a global consulting or technology services environment.


• Broad knowledge across cybersecurity domains, with depth in governance, risk, compliance, controls, resilience and enterprise transformation.


• Proven ability to advise C-suite and board stakeholders, influence investment decisions and communicate complex cyber issues in business terms.


• Experience leading large consulting engagements and technology-enabled transformations from strategy through implementation and operating-model adoption.


• Strong commercial capability across account growth, pipeline creation, solution shaping, pricing, contracting and financial management.


• Experience leading global, culturally diverse and matrixed teams across advisory, architecture, engineering and delivery.


• Excellent executive communication, negotiation, stakeholder management, analytical and problem-solving skills.

Preferred Credentials and Experience

• CISSP, CISM, CISA, CRISC, CGEIT, CCSP, ISO/IEC 27001 Lead Implementer or Lead Auditor, or equivalent senior cybersecurity credentials.


• ServiceNow Certified Implementation Specialist or relevant Risk and Security Operations accreditations; experience with Archer or comparable GRC platforms is advantageous.


• Experience with cyber risk quantification methods such as FAIR and with metrics that connect control performance to financial and operational impact.


• Experience in highly regulated industries and across multiple geographies, including financial services, healthcare, energy, manufacturing, telecommunications or the public sector.


• Thought leadership through industry forums, publications, analyst engagement or participation in professional and standards communities.