(USA) Distinguished, Risk Expert

About the role

Fits someone who has led security for complex engineering groups and can turn business needs into practical security requirements. The work sits between technology and security organisations, with accountability for measurable risk reduction.

At a glance

What you will do

• Act as the main security lead for assigned technology teams, matching priorities to business and engineering needs
• Build automated, scalable security practices into the software development lifecycle
• Set maturity roadmaps, assign risk ownership and drive accountability for lowering security risk
• Turn business needs and risks into security requirements and brief senior leaders and product teams
• Work with technology and security groups to prioritise work, settle risk decisions and lead incident escalations

What they look for

• Ten or more years leading technology or information security work
• Experience running complex security programmes, resolving root causes and managing stakeholders
• Skill in assessing and fixing vulnerabilities using metrics and risk frameworks
• Knowledge of governance, compliance, policies and industry frameworks, plus CISSP or CISM

Benefits

• Medical, vision and dental cover, 401(k), stock purchase, life insurance, paid time off and parental leave