Vice President, Cyber Security

Technical Leadership and Deliver y

• Provide day-to-day technical leadership to security engineers and analysts, coordinating priorities and delivery across internal teams, global locations, and service providers.
• Translate the security roadmap into a prioritized delivery plan with clear owners, milestones, and measurable outcomes. Resolve dependencies and follow issues through to closure.
• Represent the SVP in technical discussions, project decisions, and escalations as delegated. Communicate risks, options, and recommendations clearly, and escalate material decisions promptly.
• Coach engineers and analysts, strengthen technical capability, and establish clear accountability for service quality and delivery.
• Lead technical remediation and control testing for GRC and Internal Audit engagements. Establish rigorous tracking for engineering actions to ensure clear ownership and audit-ready closure evidence

Cyber Security Operations and Incident Response

• Lead the internal technical response to security incidents, coordinating investigation, containment, eradication, and recovery with technology teams and managed security providers. Keep leadership informed and engage appropriate stakeholders through established escalation procedures.
• Maintain incident playbooks, escalation paths, and response readiness. Coordinate exercises and post-incident reviews, preserve evidence, and ensure corrective actions are completed.
• Hold managed SOC, detection and response, and threat hunting providers accountable for coverage, investigation quality, timely escalation, and service performance.
• Improve detection use cases, telemetry, alert tuning, and threat hunting using threat intelligence and attacker behaviors. Validate coverage across endpoints, email, enterprise applications, and collaboration platforms.

Security Engineering and Automation

• Lead the implementation and improvement of security technologies, including SIEM, EDR/XDR, email security, and data protection controls. Work with Endpoint Engineering on tool integration and hardening and verify configurations and integrations through testing.
• Build and guide automation using APIs, scripting, and orchestration to improve detection, investigation, response, and control validation, with appropriate testing and change management.
• Establish operational ownership, platform health monitoring, runbooks, and support processes. Reduce control gaps, unnecessary complexity, and recurring manual work.
• Lead technical security design reviews and threat modeling for applications, system integrations, and security technologies. Translate findings into practical design requirements and engineering changes.
• Develop reusable security patterns and technical standards with Enterprise Architecture and engineering teams, emphasizing secure configurations, defense in depth, and operational resilience.
• Validate security designs through technical testing and confirm that new capabilities integrate with detection, investigation, and response processes before production rollout.

Vulnerability and Exposure Management

• Lead the vulnerability and exposure management lifecycle, prioritizing remediation using exploitability, asset criticality, business impact, and attack paths.
• Coordinate penetration tests and adversary simulations, convert findings into assigned remediation plans, and validate that fixes and compensating controls are effective.
• Measure detection and response performance, security platform health, coverage gaps, and remediation progress. Use the results to prioritize technical improvements and provide concise updates to the SVP.

Data Protection and Application Security

• Engineer and tune data protection controls, including sensitivity label enforcement, DLP detections, and investigation workflows, in coordination with data owners.
• Partner with application development teams on secure design, code and dependency scanning, and remediation. Work with the AI Technology & Security leads to review access, data flows, and agent permissions for enterprise AI adoption. Use approved AI tools to improve security workflows, with appropriate validation.

Qualifications

• 10 or more years of progressive cyber security experience, including substantial hands-on security engineering or architecture work and at least 3 years leading technical teams. Demonstrated ability to set priorities, coach engineers and analysts, and deliver security improvements.
• Demonstrated ability to lead security operations and incident response, make sound containment decisions, and coordinate internal teams and managed service providers under pressure.
• Strong hands-on experience with enterprise security platforms (SIEM/SOAR, EDR/XDR, email security, and data protection) and strong knowledge of Microsoft 365 and Windows environments, including endpoint protection and security logging. Ability to investigate telemetry, inspect configurations, and troubleshoot complex issues.
• Experience reviewing technical architecture, conducting threat modeling, and designing security controls for endpoints, applications, data, and security platforms.
• Ability to write and review automation in PowerShell, Python, or a comparable language and integrate security tools through APIs.
• Experience driving vulnerability remediation and validating technical controls, with working knowledge of CIS Controls, MITRE ATT&CK, and secure configuration baselines. Strong written and verbal communication and execution skills to explain technical risks to leadership, collaborate with GRC and Internal Audit, and drive engineering actions to completion.

Preferred Qualifications

• Experience in investment management, financial services, or another regulated enterprise with a high level of service to business users.
• Experience with platforms such as Microsoft Defender, Microsoft Purview, CrowdStrike Falcon, Splunk or Microsoft Sentinel, and with managed SOC or MDR operating models.
• Exposure to secure development practices and enterprise AI security, including connectors, agents, data access, and human oversight.
• CISSP, GCIH, GCIA, or comparable security certifications.

Personal Attributes

• Leads by doing and earns credibility through technical depth, sound judgment, and consistent follow-through.
• Takes ownership, anticipates problems, and demonstrates initiative forward independently while keeping leadership informed.
• Balances security with business needs and user experience, offering workable solutions and responsive service.
• Builds trust across teams, develops others, and remains calm and decisive under pressure. Exercises discretion and high integrity with sensitive information.

Education

Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Cyber Security, or a related field required.

Pay and benefits

In addition to a competitive base salary, you will be eligible to receive discretionary bonus incentives, a comprehensive benefits package and a flexible work arrangement. The base salary offered will be commensurate with experience and/or qualifications, industry knowledge and expertise, as well as prior training and education.