IT Senior Leader - Threat Mgmt (Build & Manage)
Location: REMOTE [No Second Jobs]
Visa Type: Citizen / / H1B1
Contact: /
Contact Name: Sri
Role Overview
The IT Senior Leader – Threat Management is responsible for building, leading, and continuously improving an enterprise-wide cybersecurity threat management function. This leader establishes the strategy, organization, processes, technologies, and governance required to identify, detect, prevent, investigate, and respond to cyber threats across infrastructure, applications, cloud, endpoints, identity, and data environments.
Key Responsibilities
Cybersecurity Strategy & Leadership
- Develop and execute the enterprise Threat Management strategy and roadmap.
- Establish cybersecurity capabilities aligned with business objectives, technology strategy, and enterprise risk.
- Define operating models, governance, policies, standards, and security controls.
- Present cybersecurity risks, priorities, investments, and performance to senior executives.
Build & Manage Security Capabilities
- Build and manage enterprise capabilities for:
- Threat Detection & Response
- Security Operations / SOC
- Threat Intelligence
- Vulnerability & Exposure Management
- Incident Response
- Digital Forensics
- Endpoint Detection & Response
- SIEM/SOAR
- Identity & Access Management
- Cloud Security
- Network Security
- Establish scalable processes for detecting and responding to emerging cyber threats.
Security Technology
- Lead selection, architecture, implementation, and optimization of cybersecurity platforms.
- Develop an integrated security technology ecosystem across SIEM, SOAR, EDR/XDR, vulnerability management, threat intelligence, IAM/PAM, cloud security, and security analytics.
- Drive automation and use of advanced analytics/AI to improve threat detection and response.
- Ensure security solutions integrate effectively with enterprise IT and cloud environments.
Threat & Vulnerability Management
- Establish an enterprise vulnerability and exposure management program.
- Prioritize vulnerabilities based on business impact and cyber risk.
- Develop threat intelligence capabilities to identify emerging attack techniques and threat actors.
- Conduct threat modeling and risk assessments for critical systems and applications.
Incident Response & Cyber Resilience
- Lead enterprise cybersecurity incident response and cyber crisis management.
- Establish incident response playbooks, escalation procedures, and communication protocols.
- Lead tabletop exercises, penetration testing, red-team exercises, and security simulations.
- Drive root-cause analysis and remediation following security incidents.
People & Organization
- Build, develop, and lead high-performing cybersecurity teams.
- Establish organizational structure, roles, career paths, skills development, and succession planning.
- Manage internal teams, consultants, managed security service providers, and technology partners.
- Build a culture of security ownership across IT and the broader organization.
Risk, Compliance & Governance
- Align security programs with frameworks such as NIST CSF, CIS Controls, ISO 27001, and applicable regulatory requirements.
- Establish cybersecurity KPIs, KRIs, dashboards, and executive reporting.
- Partner with Enterprise Risk, Internal Audit, Legal, Privacy, Compliance, and Business Continuity teams.
- Ensure appropriate security controls are implemented across critical business processes.
Financial & Vendor Management
- Own cybersecurity technology and operational budgets.
- Develop business cases and ROI analysis for security investments.
- Manage strategic cybersecurity vendors and third-party service providers.
- Negotiate contracts and ensure vendors meet security, performance, and risk requirements.
Core Competencies
Area | Expected Capability |
Cybersecurity Strategy | Enterprise security strategy & roadmap |
Threat Management | Threat detection, intelligence & response |
Security Operations | SOC, SIEM, SOAR, EDR/XDR |
Risk Management | Cyber risk & vulnerability management |
Cloud Security | Azure / AWS / Google Cloud Platform security |
Identity | IAM / PAM / Zero Trust |
Incident Response | Investigation, containment & recovery |
Security Architecture | Enterprise security design |
Leadership | Organization building & transformation |
Financial Management | Budget, business cases & ROI |
Vendor Management | Strategic suppliers & MSSPs |
Executive Communication | C-suite & board-level reporting |
Typical Qualifications
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field.
- 12–15+ years of experience in IT/cybersecurity/security operations.
- 5–8+ years of senior cybersecurity leadership experience.
- Experience building and managing enterprise cybersecurity programs.
- Experience managing large technology/security budgets.
- Strong experience with cybersecurity transformation and technology implementation.
- Experience leading cross-functional teams in a complex enterprise environment.
Preferred certifications: CISSP, CISM, CRISC, CCSP, GIAC, PMP, or relevant cloud/security certifications.
Contact: /
Never miss an opportunity! Create an alert based on the job you applied for.
