Cybersecurity Program Senior Strategist

Cybersecurity Technical Lead

Provides technical expertise and leadership to internal business clients for their Cybersecurity related projects and initiatives by working with Corporate Information Security Management, external vendors, and internal lines of business. Responsible for oversight and communication of the cybersecurity programs, which includes: providing strategic direction, financial oversight, and investment prioritization of new security controls/initiatives to address emerging threats; managing portfolio reporting and delivery of cybersecurity controls/capabilities to address risks in our environment.

Essential Duties And Responsibilities

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Collaborate with lines of business and internal IT groups in evaluating and gathering technical requirements for business clients' projects and initiatives.

2. Research clients' requirements to develop potential technical solutions by interacting with any internal and/or external solution providers and subject matter experts.

3. Communicate and document potential solutions, impact analysis, benefits/risks, implementation requirements, and recommended approach.

4. Oversee and conduct a variety of analysis to guide program strategy and develop short- and long-term plans.

5. Make recommendations regarding cybersecurity related projects and initiatives.

6. Consults with business leaders on the development of policies, processes and practices.

7. Remain aware of the corporate technology, infrastructure, standards, processes, and strategic direction and use these tools to help guide the client in accomplishing their business goals.

8. Maintains cybersecurity collaboration and knowledge platforms (Teams/SharePoint) and designs automation solutions (AI, Power Automate/Power Apps), including managing AI agents that analyze data and support

Qualifications

Required Qualifications:

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. Bachelor's degree preferably in regulatory affairs, business, organizational or compliance law, or financial services

2. Five years related experience performing legal, compliance, or other duties such as risk management and/or project management

3. Strong knowledge of cyber governance terms, disciplines and frameworks

Preferred Qualifications:

1. Knowledge of financial services industry and all applicable regulations and industry standards

2. Cyber security certifications such as CISA, CISSP

3. Banking or financial services experience

4. Experience designing and supporting workflow automations (e.g., Microsoft Power Automate and/or Power Apps).

5. Working knowledge of Microsoft 365 collaboration tools (Teams and SharePoint), including site/page maintenance and permissions-aware content management.

6. Ability to create, refine, and manage AI prompts in Microsoft Copilot or similar tools, with attention to quality, repeatability, and safe data handling.

7. Experience producing operational metrics, dashboards, or reports from security tooling and collaboration platforms.

8. Demonstrated ability to handle sensitive information with discretion and maintain confidentiality.

9. Hands-on experience with JSON (parsing, formatting, and working with structured data), plus scripting/automation with PowerShell.

10. Experience in event response, cyber/operational risk management, or control assurance; able to document risk statements, impact, and mitigations for stakeholders.

11. Experience with remediation tracking (corrective action plans/issues management) and using case management/GRC/workflow tools to drive issues to closure.

Other Job Requirements / Working Conditions

Sitting Constantly (More than 50% of the time)

Visual / Audio / Speaking Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.

Manual Dexterity / Keyboarding Able to work standard office equipment, including PC keyboard and mouse, copy/fax machines, and printers.

Availability Able to work all hours scheduled, including overtime as directed by manager/supervisor and required by business need.

Travel Minimal and up to 10%