Senior Director - Cyber Advisory, Risk & Compliance

The user wants me to convert this job posting into clean semantic HTML following specific rules. Let me analyze the content and structure it appropriately. First, I need to identify the sections: 1. About the role / Role mandate / Purpose of the Role 2. Leadership Scope 3. Key Responsibilities (with 6 sub-sections) 4. Required Experience and Qualifications 5. Preferred Credentials and Experience 5. Pay/Benefits (there's explicit pay range and benefits mentioned) I need to use

for section headings,

• for lists,

  for prose. Don't repeat job title as heading. Don't include Job ID/requisition numbers (none present). Remove boilerplate like "Reinvent your world..." and "Applications from people with disabilities..." - those are EEO/boilerplate. The pay range is explicitly stated: $200,000 to $280,000. Benefits are listed: medical/dental, disability insurance, PTO, etc. So I should include Pay and Benefits sections. Schedule not mentioned, so no Schedule section. Now, structure: - About the Role (combining Role mandate and Purpose of the Role) - Leadership Scope - Key Responsibilities (with subsections as h4? But rule says use h3 for section headings. The subsections are numbered 1-6. Could make them h3 or maybe keep as h3 with the numbered titles. The rule says "use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)". So Responsibilities is a section heading. The sub-items could be h4 but not specified. Safer to use h3 for each major section, and for the numbered responsibilities, maybe use h4? But the instruction says only h3 for section headings. Might treat each numbered responsibility as a subsection under Responsibilities. Could use h3 for "Key Responsibilities" and then each numbered item as a

  ? Not prohibited. But to keep simple, maybe use

  for each major section: "About the Role", "Leadership Scope", "Key Responsibilities", "Required Experience and Qualifications", "Preferred Credentials and Experience", "Pay", "Benefits". Then within Key Responsibilities, use

  for each numbered area? The rule doesn't forbid h4. But they said "use

  for section headings". Might be okay to use h4 for subsections. However, to be safe, I'll make each numbered responsibility a separate h3? That would be many h3s. The example includes "Responsibilities" as a heading. So I'll have one h3 "Key Responsibilities" and then list the six areas as a list? But they have detailed bullets under each. Better to have each as a subsection with h4. I think it's acceptable. Let's parse content. First, "Role mandate" and "Purpose of the Role" are prose. Combine into "About the Role". Leadership Scope: list of bullet points. Key Responsibilities: six numbered sections each with bullet points. Required Experience and Qualifications: list. Preferred Credentials and Experience: list. Pay: explicit range. Benefits: listed. Now, remove boilerplate: "Reinvent your world... Come to Wipro. Realize your ambitions. Applications from people with disabilities are explicitly welcome." That's marketing/EEO. Also remove "Expected annual pay for this role ranges from $200,000.00 to $280,000.00. Based on the position, the role is also eligible for Wipro’s standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options" - that's pay and benefits content, keep. Now produce HTML fragment. I'll write:

  About the Role

  Role mandate: Lead and grow the Cyber Advisory, Risk and Compliance portfolio across strategy, transformation, governance, resilience and technology-enabled risk programs. Serve as a trusted advisor to C-suite and board stakeholders while ensuring commercial growth, delivery excellence and measurable client outcomes across the cyber domain.

  Purpose of the Role: We are seeking a senior cybersecurity leader to build, lead and scale a differentiated Cyber Advisory, Risk and Compliance practice. The leader will combine broad cyber-domain knowledge with deep expertise in governance, risk, compliance and executive advisory. The role spans market development, client leadership, solution innovation, complex transformation delivery, talent development and alliance-led growth. The successful candidate will engage CISOs, CIOs, CROs, Chief Compliance Officers, business executives and boards to translate cyber risk into business decisions. They will shape multi-year transformation agendas, guide clients through regulatory and technology change, and connect strategy with implementation across platforms such as ServiceNow, Archer and other GRC, security and resilience technologies.

  Leadership Scope

  • Own the Cyber Advisory, Risk and Compliance strategy, portfolio roadmap, go-to-market plan, pipeline and financial performance.
  • Provide senior leadership across cyber strategy, enterprise risk, regulatory compliance, security governance, digital trust, operational resilience and security transformation.
  • Lead executive-level client relationships, board and C-suite workshops, risk committee engagements and strategic account growth.
  • Build and govern a global delivery model spanning advisory consultants, risk specialists, architects, platform teams and managed services.
  • Create repeatable offerings, methods, accelerators and intellectual property that connect advisory outcomes to implementation and run-state services.
  • Act as the senior escalation point for complex programs, ensuring quality, commercial discipline, risk management and client satisfaction.

  Key Responsibilities

  1. Cyber Advisory and Executive Engagement

  • Advise senior stakeholders on cyber strategy, target operating models, investment prioritization, cyber risk quantification, security transformation and board reporting.
  • Lead current-state assessments, maturity reviews, control optimization, roadmap development, business cases and multi-year transformation programs.
  • Translate technical exposure, threat intelligence and control performance into clear business-risk and investment decisions.
  • Facilitate executive workshops and build trusted relationships that position the organization as a long-term strategic partner.

  2. Risk, Compliance and Resilience

  • Lead enterprise and technology risk programs covering governance, policy, controls, compliance, third-party risk, operational resilience and business continuity.
  • Guide clients on major frameworks and regulations, including NIST CSF, ISO/IEC 27001, ISO 22301, COBIT, CIS Controls, PCI DSS, SOX, GDPR, DORA and sector-specific requirements.
  • Design continuous compliance, automated control testing, integrated assurance, risk analytics and executive reporting models.
  • Oversee third-party risk management across lifecycle governance, inherent risk, due diligence, continuous monitoring, remediation and concentration risk.

  3. Broad Cyber Domain Leadership

  • Provide informed leadership across cloud security, identity and access management, data protection, application security, vulnerability management, threat detection and response, security operations, OT/IoT security and AI security.
  • Connect advisory recommendations with architecture, engineering, platform implementation, managed security services and measurable control outcomes.
  • Challenge and validate solution designs to ensure business alignment, regulatory defensibility, interoperability and sustainable operating models.
  • Technical risk assessments and architecture reviews.

  4. Technology-Enabled Transformation

  • Shape transformations using ServiceNow Integrated Risk Management, Third-Party Risk Management, Business Continuity Management, Security Incident Response, Vulnerability Response and AI governance capabilities.
  • Provide functional and strategic oversight for GRC platforms including ServiceNow, Archer and adjacent risk, compliance, security and analytics technologies.
  • Drive platform-led operating models, workflow automation, control telemetry, AI-assisted advisory and outcome-based services rather than isolated tool implementations.
  • Ensure business requirements, control objectives and risk use cases are translated into scalable platform designs and adoption roadmaps.

  5. Growth, Portfolio and Alliance Leadership

  • Lead strategic pursuits, RFP responses, solution shaping, executive presentations, commercials and deal governance for complex cyber opportunities.
  • Develop market-facing propositions, thought leadership, webinars, analyst content, client roundtables and industry points of view.
  • Build joint offerings and go-to-market motions with technology alliances while preserving client outcomes, delivery accountability and commercial clarity.
  • Own portfolio metrics including revenue, margin, pipeline, win rate, utilization, client satisfaction, quality and recurring-services growth.

  6. Delivery Excellence and Talent

  • Establish delivery governance for large, multi-country and multi-workstream programs, including scope, dependencies, quality, risk and executive reporting.
  • Build a high-performing leadership bench and multidisciplinary team of cyber advisors, risk consultants, architects and delivery leaders.
  • Coach senior practitioners, define career paths and certification priorities, and create communities of practice across cyber domains.
  • Maintain zero-surprise governance, intervene early on delivery risks and ensure lessons learned are embedded into methods and offerings.

  Required Experience and Qualifications

  • 15+ years of progressive cybersecurity, risk, compliance or technology consulting experience, including significant senior leadership responsibility.
  • Demonstrated success leading a Cyber Advisory, Risk, Compliance, Security Transformation or equivalent portfolio in a global consulting or technology services environment.
  • Broad knowledge across cybersecurity domains, with depth in governance, risk, compliance, controls, resilience and enterprise transformation.
  • Proven ability to advise C-suite and board stakeholders, influence investment decisions and communicate complex cyber issues in business terms.
  • Experience leading large consulting engagements and technology-enabled transformations from strategy through implementation and operating-model adoption.
  • Strong commercial capability across account growth, pipeline creation, solution shaping, pricing, contracting and financial management.
  • Experience leading global, culturally diverse and matrixed teams across advisory, architecture, engineering and delivery.
  • Excellent executive communication, negotiation, stakeholder management, analytical and problem-solving skills.

  Preferred Credentials and Experience

  • CISSP, CISM, CISA, CRISC, CGEIT, CCSP, ISO/IEC 27001 Lead Implementer or Lead Auditor, or equivalent senior cybersecurity credentials.
  • ServiceNow Certified Implementation Specialist or relevant Risk and Security Operations accreditations; experience with Archer or comparable GRC platforms is advantageous.
  • Experience with cyber risk quantification methods such as FAIR and with metrics that connect control performance to financial and operational impact.
  • Experience in highly regulated industries and across multiple geographies, including financial services, healthcare, energy, manufacturing, telecommunications or the public sector.
  • Thought leadership through industry forums, publications, analyst engagement or participation in professional and standards communities.

  Pay

  Expected annual pay for this role ranges from $200,000.00 to $280,000.00.

  Benefits

  • Full range of medical and dental benefits options
  • Disability insurance
  • Paid time off (inclusive of sick leave)
  • Other paid and unpaid leave options
  Check for any missing content. The "Technical risk assessments and architecture reviews" appears as a bullet under section 3. Good. Now ensure no markdown code fences.