Head of Cyber Risk

Job Summary

We are seeking an experienced Cyber Risk Director with over 22 years of expertise in cybersecurity, enterprise risk management, governance, and regulatory compliance. The role will lead the organization's cyber risk strategy, ensuring protection of digital assets, regulatory adherence, and resilience against evolving cyber threats. This position partners closely with executive leadership, IT, legal, and business stakeholders to embed security into business operations.

Key Responsibilities

• Define and lead the enterprise-wide cyber risk management strategy

• Identify, assess, and mitigate cybersecurity and technology risks across systems, applications, cloud, and third-party vendors

• Establish and maintain cyber risk governance frameworks, policies, and standards

• Oversee risk assessments, threat modeling, and vulnerability management

• Lead incident response planning, cyber crisis simulations, and post-incident reviews

• Ensure compliance with global and regional regulations (ISO 27001, NIST, GDPR, SOC, etc.)

• Advise executive leadership and board on cyber risk posture and emerging threats

• Manage third-party and supply chain risk assessments

• Drive security awareness programs across the organization

• Collaborate with IT, legal, audit, and business units to align cyber risk with business objectives

• Prepare and present risk reports, dashboards, and metrics to senior leadership

• Lead, mentor, and develop cyber risk and security teams

Required Qualifications

• 22+ years of experience in cybersecurity, cyber risk management, or information security

• Proven leadership experience at Director / Senior Leadership level

• Strong expertise in:

  • Cyber risk frameworks (NIST, ISO 27001, COBIT)

  • Regulatory and compliance requirements

  • Enterprise risk management

  • Cloud, infrastructure, and application security

• Experience working with C-suite and Board-level stakeholders

• Strong incident management and crisis leadership experience

• Excellent communication, presentation, and stakeholder management skills

Key Competencies

Strategic thinking and decision-making

• Risk-based security leadership

• Business-aligned security mindset

• Vendor and third-party risk management

• Strong governance and policy leadership