Job Description

Job Summary

1. Cybersecurity Strategy & Governance : Drive cybersecurity governance and priorities for the DFS LoB.2. Cyber Risk Management : Identify security risks, control gaps, vulnerabilities, and areas requiring improvement. Drive remediation of identified risks and escalate critical or overdue risks through appropriate governance channels.3. Security Posture & Remediation Governance : Monitor security improvement initiatives and drive closure of identified gaps.4. Security Controls & Assurance : Govern internal cybersecurity assessments and support alignment with applicable security standards.5. Cybersecurity Incident Management : Drive or support Root Cause Analysis (RCA) and Corrective and Preventive Actions (CAPA) following security incidents. Ensure lessons learned contribute to security posture improvements.6. Risk, Compliance & Regulatory Alignment : Collaborate with Risk & Compliance and privacy stakeholders to help ensure assessment activities align with relevant security and regulatory requirements.7. Security Metrics & Executive Reporting : Develop and maintain cybersecurity dashboards and governance reports. Provide leadership with actionable visibility into cybersecurity risks, control gaps, remediation progress, and overall security posture.8. Security Awareness & Culture: Drive cybersecurity awareness initiatives across the business. Promote role-based security training and cybersecurity champion programs. Use insights from assessments, audits, and incidents to strengthen security awareness and behaviors.9. Business & Customer Security Advisory: Act as a cybersecurity SPOC and advisor for relevant business stakeholders. Provide security guidance that enables the business while managing cybersecurity risk.10. Enterprise Security Collaboration : Provide business context to the GIS/GIT security organization to help align enterprise security roadmaps with business priorities. Collaborate with business leaders, delivery stakeholders, technical SMEs, Risk & Compliance, privacy, and security teams to drive security improvements

Key Responsibilities

1. Cybersecurity Strategy & Governance : Drive cybersecurity governance and priorities for the DFS LoB.2. Cyber Risk Management : Identify security risks, control gaps, vulnerabilities, and areas requiring improvement. Drive remediation of identified risks and escalate critical or overdue risks through appropriate governance channels.3. Security Posture & Remediation Governance : Monitor security improvement initiatives and drive closure of identified gaps.4. Security Controls & Assurance : Govern internal cybersecurity assessments and support alignment with applicable security standards.5. Cybersecurity Incident Management : Drive or support Root Cause Analysis (RCA) and Corrective and Preventive Actions (CAPA) following security incidents. Ensure lessons learned contribute to security posture improvements.6. Risk, Compliance & Regulatory Alignment : Collaborate with Risk & Compliance and privacy stakeholders to help ensure assessment activities align with relevant security and regulatory requirements.7. Security Metrics & Executive Reporting : Develop and maintain cybersecurity dashboards and governance reports. Provide leadership with actionable visibility into cybersecurity risks, control gaps, remediation progress, and overall security posture.8. Security Awareness & Culture: Drive cybersecurity awareness initiatives across the business. Promote role-based security training and cybersecurity champion programs. Use insights from assessments, audits, and incidents to strengthen security awareness and behaviors.9. Business & Customer Security Advisory: Act as a cybersecurity SPOC and advisor for relevant business stakeholders. Provide security guidance that enables the business while managing cybersecurity risk.10. Enterprise Security Collaboration : Provide business context to the GIS/GIT security organization to help align enterprise security roadmaps with business priorities. Collaborate with business leaders, delivery stakeholders, technical SMEs, Risk & Compliance, privacy, and security teams to drive security improvements

Skill Requirements

1. Cybersecurity Strategy & Governance : Drive cybersecurity governance and priorities for the DFS LoB.2. Cyber Risk Management : Identify security risks, control gaps, vulnerabilities, and areas requiring improvement. Drive remediation of identified risks and escalate critical or overdue risks through appropriate governance channels.3. Security Posture & Remediation Governance : Monitor security improvement initiatives and drive closure of identified gaps.4. Security Controls & Assurance : Govern internal cybersecurity assessments and support alignment with applicable security standards.5. Cybersecurity Incident Management : Drive or support Root Cause Analysis (RCA) and Corrective and Preventive Actions (CAPA) following security incidents. Ensure lessons learned contribute to security posture improvements.6. Risk, Compliance & Regulatory Alignment : Collaborate with Risk & Compliance and privacy stakeholders to help ensure assessment activities align with relevant security and regulatory requirements.7. Security Metrics & Executive Reporting : Develop and maintain cybersecurity dashboards and governance reports. Provide leadership with actionable visibility into cybersecurity risks, control gaps, remediation progress, and overall security posture.8. Security Awareness & Culture: Drive cybersecurity awareness initiatives across the business. Promote role-based security training and cybersecurity champion programs. Use insights from assessments, audits, and incidents to strengthen security awareness and behaviors.9. Business & Customer Security Advisory: Act as a cybersecurity SPOC and advisor for relevant business stakeholders. Provide security guidance that enables the business while managing cybersecurity risk.10. Enterprise Security Collaboration : Provide business context to the GIS/GIT security organization to help align enterprise security roadmaps with business priorities. Collaborate with business leaders, delivery stakeholders, technical SMEs, Risk & Compliance, privacy, and security teams to drive security improvements

Other Requirements

1. Cybersecurity Strategy & Governance : Drive cybersecurity governance and priorities for the DFS LoB.2. Cyber Risk Management : Identify security risks, control gaps, vulnerabilities, and areas requiring improvement. Drive remediation of identified risks and escalate critical or overdue risks through appropriate governance channels.3. Security Posture & Remediation Governance : Monitor security improvement initiatives and drive closure of identified gaps.4. Security Controls & Assurance : Govern internal cybersecurity assessments and support alignment with applicable security standards.5. Cybersecurity Incident Management : Drive or support Root Cause Analysis (RCA) and Corrective and Preventive Actions (CAPA) following security incidents. Ensure lessons learned contribute to security posture improvements.6. Risk, Compliance & Regulatory Alignment : Collaborate with Risk & Compliance and privacy stakeholders to help ensure assessment activities align with relevant security and regulatory requirements.7. Security Metrics & Executive Reporting : Develop and maintain cybersecurity dashboards and governance reports. Provide leadership with actionable visibility into cybersecurity risks, control gaps, remediation progress, and overall security posture.8. Security Awareness & Culture: Drive cybersecurity awareness initiatives across the business. Promote role-based security training and cybersecurity champion programs. Use insights from assessments, audits, and incidents to strengthen security awareness and behaviors.9. Business & Customer Security Advisory: Act as a cybersecurity SPOC and advisor for relevant business stakeholders. Provide security guidance that enables the business while managing cybersecurity risk.10. Enterprise Security Collaboration : Provide business context to the GIS/GIT security organization to help align enterprise security roadmaps with business priorities. Collaborate with business leaders, delivery stakeholders, technical SMEs, Risk & Compliance, privacy, and security teams to drive security improvements