Group Director, Cyber Risk & Security Engineering

Summary

Lead the cyber risk and security engineering function to safeguard systems and embed security across digital and physical environments. Collaborate cross-functionally to assess and prioritize risks, implement controls, and drive enterprise-wide security awareness and identity governance. Serve as a technical leader influencing security strategy, remediation, and measurable behavior change.

Responsibilities

• Lead implementation and integration of security controls across cloud, network, endpoint, and physical environments.
• Develop and operate continuous risk assessment, monitoring, and remediation programs.
• Translate technical risks into actionable requirements and influence stakeholders across engineering, operations, retail, and legal.
• Build and scale security awareness and training programs to drive measurable behavior change.
• Drive identity and access governance, ensuring appropriate access while minimizing business friction.
• Embed security into CI/CD pipelines and infrastructure through DevSecOps and infrastructure-as-code practices.
• Advise on compliance, apply industry frameworks, and act as a decisive technical leader within a matrixed organization.

Requirements

• Minimum 10 years of cyber security engineering experience with hands-on leadership in enterprise environments.
• Proven experience across cloud platforms (Azure, AWS, GCP), networks, endpoints, and security technologies such as SIEM, EDR, and PAM.
• Proficiency in secure software development, DevSecOps, and infrastructure-as-code (Terraform, Ansible).
• Deep knowledge of identity and access management, data loss prevention, encryption, and secure communications.
• Practical experience applying frameworks such as NIST 800-53, ISO 27001, and CIS; PCI DSS experience preferred.
• Bachelor’s degree in computer science or related field or equivalent experience; security certifications (CISSP, CISM, CISA) preferred.
• Strong communication skills with the ability to present technical risk to senior leadership.