Cyber Security Review Program Lead

What you'll do

• Own the end-to-end design, governance, and continuous improvement of the Cyber Security Review program.
• Lead security reviews for new technology projects, purchases, and organizational changes to identify and mitigate risks.
• Conduct re-reviews of existing critical applications to identify control gaps and areas requiring remediation.
• Manage the relationship and oversight of external managed service providers supporting the security review process.
• Define and maintain program metrics and reporting to provide transparency into risk findings and performance.
• Identify and execute opportunities for improvement through automation, tooling, and emerging technologies like AI.
• Engage with stakeholders across business functions to embed risk identification early in decision-making processes.

What we're looking for

• Must have 6+ years of experience in security engineering, risk management, or a related technical discipline within a large enterprise environment.
• Demonstrated experience owning or leading a security review, risk assessment, or related program including methodology design and governance.
• Deep technical experience across a broad range of technologies to support effective security assessments.
• Experience conducting security reviews for technology projects, system changes, or application portfolios to identify control gaps and risks.
• Strong process design and improvement skills to build structured, repeatable, and scalable review processes.
• Ability to engage independently with both technical and non-technical stakeholders to drive alignment and influence outcomes.
• Familiarity with risk management frameworks such as NIST Cybersecurity Framework, COBIT 2019, or the NIST Privacy Framework.
• Experience building or maturing a security review program by developing standards, templates, or playbooks.