Technology Director

What you'll do

• Set and execute the strategic direction for vulnerability management and application security across the WIMT organization.
• Lead a federated operating model to manage vulnerabilities across applications, infrastructure, cloud, containers, and open-source software.
• Drive the adoption of DevSecOps, secure software development lifecycles, and automated security tools like SAST, DAST, and SCA.
• Establish a transparent reporting system to provide executive leaders with actionable data on risk exposure, ownership, and remediation performance.
• Implement a risk-based prioritization framework using exploitability, business impact, and threat intelligence to guide remediation efforts.
• Provide engineering-enablement by delivering self-service capabilities, reusable remediation patterns, and preventative controls to technology teams.
• Influence enterprise-wide security roadmaps and tooling while ensuring WIMT-specific requirements and gaps are addressed.
• Partner with senior leadership across Cybersecurity, Risk, Audit, and Product to resolve systemic risks and remediation commitments.

What we're looking for

• 10+ years of Technology Strategic Leadership experience, or equivalent demonstrated through work experience, training, military experience, or education.
• 4+ years of management or leadership experience.
• 5+ years of experience leading a large-scale vulnerability management, Application Security, cyber risk, security engineering, or closely related technology function.
• 5+ years of experience with Application Security, secure software development lifecycle practices, DevSecOps, and risk-based vulnerability prioritization and remediation.
• 5+ years of experience leading significant technology or cybersecurity transformation, including changes to operating models, accountability, processes, engineering practices, data, or technology capabilities.
• 5+ years of experience leading horizontally through influence in a complex matrixed organization and driving outcomes across organizations outside of direct reporting lines.
• 5+ years of experience partnering with and influencing senior Technology, Cybersecurity, Risk, Audit, Product, Engineering, Infrastructure, and business stakeholders.
• 5+ years of experience translating technology and business requirements into broader enterprise capabilities, technology strategies, platforms, or operating-model improvements.
• 5+ years of experience establishing transparent management reporting, authoritative data, meaningful metrics, and executive-level risk views that enable decisions, accountability, and measurable outcomes.
• 5+ years of experience developing technology talent, building organizational capabilities, and communicating complex technology and cybersecurity risks to senior leadership.
• Experience leading vulnerability management or Application Security within a large, complex, highly regulated financial services organization (preferred).
• Advanced knowledge of secure SDLC, secure-by-design principles, DevSecOps, threat modeling, SAST, DAST, SCA, penetration testing, software supply-chain security, and modern application architectures (preferred).
• Experience establishing federated vulnerability-management, security-champion, or similar technology-risk and engineering-enablement models (preferred).
• Experience implementing threat-informed and business-contextual vulnerability prioritization and translating technical findings into meaningful business and technology risk (preferred).
• Experience developing executive vulnerability reporting that connects exposure with applications, criticality, ownership, remediation commitments, aging, dependencies, and systemic risk (preferred).
• Experience establishing authoritative vulnerability data and consolidating fragmented reporting, tooling, governance, and manual operational processes (preferred).
• Experience developing automated or self-service capabilities supporting vulnerability remediation, validation, evidence collection, prioritization, reporting, and reusable remediation patterns (preferred).
• Experience influencing enterprise cybersecurity, technology, or engineering capabilities and roadmaps and applying automation or AI to improve cybersecurity, secure development, or engineering productivity (preferred).
• Demonstrated ability to challenge established processes, remove organizational friction, influence senior stakeholders, and lead sustained change across organizational boundaries (preferred).