Director, Operations and Strategy, Risk and Security

What You'll Be Doing

• Strategy
• Serve as a strategic advisor and operational partner to the Risk and Security leadership team, working closely with the CSRO to advance strategic priorities.
• Drive the leadership rhythm of business, including planning and coordination for key engagements with business partners and other relevant stakeholders.
• Lead and facilitate meetings with senior executives, drive security outreach and awareness efforts, and prepare executive briefings, decision memoranda, and board- or committee-ready materials while tracking commitments and follow-through.
• Translate enterprise and security strategy into a multi-year roadmap, annual operating plan, and measurable operational initiatives.
• Roadmap Management
• Lead enterprise intake and portfolio governance for Risk and Security initiatives, operating stage gates, prioritization, and value realization practices.
• Manage program controls, delivery health, interdependencies, resource capacity, milestone tracking, and executive reporting.
• Standardize delivery approaches across waterfall, agile, and hybrid execution models where appropriate.
• Elevate decisions based on risk, outcomes, constraints, and business value.
• Security Culture and Awareness
• Direct the enterprise security culture and awareness program.
• Oversee awareness campaigns, role-based training, and phishing, smishing, and vishing simulation programs.
• Partner with the Human Risk Management function to translate human risk insights into targeted awareness and behavior change initiatives.
• Measure behavior change and awareness effectiveness and report outcomes to leadership.
• Executive Planning
• Direct the BISO function as the bridge between the Risk and Security organization and the business lines it supports.
• Embed security and risk requirements into business unit planning, initiatives, and decision-making.
• Translate enterprise security priorities into business-relevant guidance and carry business-line context back into the security organization.
• Provide executive visibility into business-line security posture, risk acceptance, and remediation progress.
• Operating Model Management
• Oversee financial planning, budgeting, forecasting, and cost transparency for the Risk and Security organization.
• Manage vendor relationships, contracts, and tooling and platform investments, and identify optimization opportunities.
• Direct data and reporting operations, executive dashboards, and reporting automation.
• Drive business enablement, documentation standards, and operational discipline across the function.
• Change, Communications, and Special Programs
• Lead organizational change management for strategic Risk and Security programs to drive adoption and value realization.
• Shape executive messaging for leadership updates, all-hands communications, and enterprise change initiatives.
• Lead special programs sponsored by the CSRO, including operating model redesign, transformation, and M and A or security integration support.

Required Skills

• Strategic planning and operating model design
• Portfolio, program, and PMO governance expertise
• Executive presence and organizational leadership
• Organizational design and operating model development
• Exceptional executive communication and executive storytelling
• Strong stakeholder influence and cross-functional facilitation skills
• Financial management, budgeting, forecasting, and cost transparency
• Strong judgment, discretion, and the ability to manage sensitive matters
• Ability to convert ambiguity into structure, action, and measurable outcomes
• Enterprise governance
• Financial acumen
• Risk-based prioritization

Desired Skills

• Prior experience in a business operation, strategy and operations, or transformation role supporting senior executives
• Familiarity with security awareness and human risk management programs
• Experience with BISO or business-facing security engagement models
• Experience with vendor management and tooling oversight across platforms such as ServiceNow, Jira and JSM, PPM suites, and GRC platforms
• Experience with M and A diligence, Day 1 planning, and integration governance

Education and Experience

• Bachelor's degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related field required; equivalent practical experience may be considered
• Master's degree preferred, such as an MBA, MIS, Cybersecurity, or Risk Management discipline
• 10+ years of progressively responsible leadership experience in cybersecurity, enterprise risk, technology, strategy, business operations, or related functions
• Experience leading cross-functional organizations
• Experience partnering directly with C-suite executives to develop strategy, governance, operational planning, executive communications, and organizational execution
• Demonstrated success building operating models, governance forums, executive reporting, and portfolio management disciplines

Preferred Certifications

• ITIL 4 Managing Professional or Strategic Leader
• PMP, PMI-ACP, or SAFe, or an equivalent Agile certification
• Prosci or equivalent organizational change management certification
• Security certifications such as CISSP, CISM, or CRISC