Lead Director - Third Party Security, Assessment Operations

What you'll do

• Own and continuously mature the enterprise Third Party Security program.
• Direct staff in developing and maintaining security assessment practices for third parties.
• Lead detailed control testing, regulatory audit scenarios, and compliance validation activities.
• Develop risk-based remediation strategies from assessment findings and lessons learned.
• Ensure organizational adherence to local, national, and international regulatory requirements.
• Serve as a trusted advisor on third party cyber security matters to senior executives.
• Define and monitor KPIs and KRIs to measure program effectiveness and drive improvement.

What we're looking for

• Over 10 years of progressive Information Security experience in risk management, architecture, and engineering.
• At least 7 years of leadership experience managing security professionals in direct and matrixed structures.
• Proven track record of building and leading Third Party Security Risk programs at enterprise scale for over 5 years.
• Extensive experience (5+ years) in detailed control testing, regulatory audits, and compliance assessments.
• Demonstrated ability to implement security controls within third-party environments supporting large enterprises.
• Strong communication skills with the ability to translate technical risk into business language for non-technical audiences.