Director IS Strategy & Advisory Services

Job Summary:

Key responsibilities include leading security strategy, methodologies, and standards for complex IT initiatives across multiple security domains, ensuring alignment with enterprise strategy and organizational KPIs. The Director will drive workforce planning, talent acquisition, and capability building at scale, addressing skill and knowledge gaps through talent development, managed-service partnerships, and vendor relationships. Additionally, the role involves partnering with cross-functional IT and business stakeholders, serving as an escalation point for risks and dependencies, and advising executive leadership on remediation and continuous improvement.

This director will be responsible for scaling and operating offshore, onshore, and global delivery models. The ideal candidate will have a background in global delivery operations, workforce and capacity planning, and vendor or managed-service partnerships.

• Establish a centralized contingent workforce strategy and governance model including effective offshoring
• Implement standardized processes for vendor selection, rate benchmarking, and contract management
• Drive cost optimization through vendor consolidation and rate negotiations
• Introduce reporting frameworks and dashboards for spend, performance, and utilization

This managing level position oversees the development, implementation and maintenance of assigned ITRM process and/or service portfolio by working collaboratively with leadership to develop the ITRM strategy. This role is responsible for staying current with industry trends, benchmarks, and best practices and providing guidance when difficult decisions need to be made.

Essential Responsibilities:

• Directs the operation of multiple units and/or departments by identifying customer and operational needs; analyzing resources, costs, and forecasts and incorporating them into business plans; gaining cross-functional support for business plans and priorities; translating business strategy into actionable business requirements; obtaining and distributing resources; setting standards and measuring progress; removing obstacles that impact performance; guiding performance and developing contingency plans accordingly; and ensuring products and/or services meet customer requirements and expectations while aligning with organizational strategies.
• Demonstrates continuous learning and maintains a highly skilled and engaged workforce by aligning resource plans with business objectives; overseeing the recruitment, selection, and development of talent; motivating teams; preparing individuals for growth opportunities and advancement; staying current with industry trends, benchmarks, and best practices; providing guidance when difficult decisions need to be made; and ensuring performance management guidelines and expectations drive business objectives and results.
• Effectively communicates technical security findings to non-technical audiences.
• Leads and assists in the development of project strategies, methodologies, and standard processes for moderately to highly complex IT initiatives across multiple security domains by analyzing business and technology requirements to ensure testability and traceability.
• Reviews and signs off on project (e.g., testing, requirements documentation, logical models, etc.) scope and approach, and partners with cross-functional IT and business stakeholders to review and approve the overall project approach.
• Researches and stays abreast of industry trends, emerging threats, best practices, and cutting edge techniques to creatively discover and exploit vulnerabilities, and recommend security solutions for technology systems.
• Serves as an escalation point on issues, dependencies, and risks related to security testing.
• Determines if the necessary skills and knowledge required to meet ongoing and changing business demands exists across business or technical domains, and ensures skill and knowledge gaps are closed through talent development and outsourcing as appropriate.
• Leverages partnerships between security consultants, Program/Project Managers, and other IT planning leaders to drive workforce planning efforts.
• Approves and directs additional staff augmentation through managed service agreements as needed.
• Oversees budgets and capital planning across departments and annual business cycle levels as appropriate.
• Oversees the implementation of and adherence to standardized security tools, templates, and processes to support continuous process improvement across business domains.
• Recommends and advocates for regional and national process or solution design improvements which align with sustainable best practices, and the strategic and tactical goals of the business.
• Provides insight and guidance to ensure solutions are aligned with business strategies, operational work flow, established budgets, and vendor service level agreements.
• Develops trends and high level themes related to lessons learned, and communicates this feedback to stakeholders, leadership, and the larger information security community.
• Collaborates with cross-functional IT teams to gain buy-in and approval of test plans, and tracks quality metrics across testing phases (e.g., SIT, Performance, UAT, Automation, Production, Validation).
• Ensures KPIs are defined, up-to-date, and aligned to higher level organizational KPIs.
• Drives the development of cyber security intellectual capital by leading process or procedure improvements, consulting on brown bag training sessions, and leading the development of new training documents.
• Directs information sharing and integration procedures across cyber security to ensure the exchange of threat intelligence and cyber security vulnerability assessment data.
• Provides insight and influence to executive management and business leaders on how to remediate issues identified through security testing processes.
• Reviews, evaluates, and prioritizes value gaps and opportunities for process enhancements or efficiencies.
• Establishes a network of partnerships with technology risk teams and business stakeholders to respond to and remediate identified issues, and ensure the best approach for improving security posture.