Director, Cyber Risk Management

How will you make an impact in this role? The Technical Risk Management (TRM) organization, which is part of the Second Line of Defense, provides independent risk oversight across Cybersecurity Risk, Technology Risk, Data Risk, Resiliency Risk, and AI Risk. This Director role is part of the Cyber Risk Management team within TRM and will lead a portfolio of independent cyber risk oversight activities. As cyber threats, technologies, and regulatory expectations continue to evolve, the Director will set oversight priorities, guide effective challenge, and help protect the company, its customers, and its assets. The successful candidate will provide strategic leadership, independent risk oversight, and effective challenge across key cybersecurity domains, including Identity and Access Management (IAM), Data Protection, and Network Security. This position is accountable for establishing a risk-based oversight plan; directing assessments, thematic reviews, monitoring, and reporting; and escalating material concerns when risk exposure or remediation is not aligned with the company’s risk appetite and policies. The Director will build trusted relationships with cybersecurity, technology, business, legal, compliance, audit, and regulatory stakeholders, translating complex technical issues into clear decisions and risk insights for senior leadership, risk committees, and regulators.