Director, Security Enablement (Remote)

Job description

The Director, Security Enablement leads the operating cadence, security metrics, executive reporting, risk coordination, and cross-functional programs that support Security across the Financial Services and Data (FSD) business unit. You will be a key liaison to the Global Security Office and turn security data and risk information into clear priorities and decisions. This is a business-unit execution role rather than a hands-on engineering position.

You will report to the Senior Director.

You'll have the opportunity to: Lead weekly and monthly security operating reviews, scorecards, dashboards, and executive reporting. Define and maintain security KPIs and KRIs, including data quality, ownership, thresholds, trends, and reporting cadence. Coordinate security risks, issues, and deviations in Archer, ensuring clear ownership, remediation plans, target dates, aging, and escalation. Track AWS security posture and migration-related risk by consolidating cloud security findings into governance metrics and leadership reporting.

Be a primary liaison across Security, Engineering, Application Security, Legal, the Global Security Office, and business leaders on standards, risk visibility, and escalations. Coordinate security communications and program execution, including awareness, policy, and leadership updates. Manage security vendor Proof of Value (PoV) tracking and Security FinOps reporting, including evaluation status, tooling spend, license utilization, renewals, and budget variance.

Translate security activity, trends, and risk into clear decision support for prioritization, investment, remediation, and escalation. Stay current on emerging AI and security trends, including relevant AI tools, use cases, risks, and security considerations.

Qualifications

Your background

10+ years of experience in cybersecurity, security program management, security governance, technology risk, or a related field. 5+ years of people leadership experience. Bachelor's degree in Cybersecurity, Information Systems, Business, or a related field, or equivalent practical experience. Experience with enterprise GRC/IRM platforms such as RSA Archer for risk, issue, deviation, workflow, or reporting processes. Experience running recurring security operating reviews, action tracking, executive reporting, and KPI/KRI dashboards.

Working knowledge of AWS security fundamentals, such as IAM, Security Hub, Config, WAF, or equivalent, to report on cloud risk. Experience working within 1LOD/2LOD risk models and coordinating programs across multiple business units in a matrixed environment. Experience presenting to senior leadership. Experience with security vendor evaluations, CSPM/CNAPP, AppSec, DSPM, Security FinOps, or certifications such as CISM, CRISC, CISSP, or AWS Certified Security - Specialty preferred.