Assessments and Exercises Director

Join us to shape the future of cybersecurity and resilience. You will lead impactful initiatives that safeguard our organization and drive continuous improvement. Your expertise will empower us to proactively identify and address risks, ensuring we stay ahead in a rapidly evolving threat landscape. We value your ability to collaborate, influence, and deliver results that matter. Discover opportunities for growth and make a difference with us.

Job Summary:
As an Assessments & Exercises Director in the Cybersecurity Testing & Controls (CTC) team, you will lead efforts to strengthen our cybersecurity and resiliency posture. You will plan and implement testing engagements to identify risks and vulnerabilities across people, processes, and technology. Your experience in conducting assessments across diverse systems will help us resolve complex cyber and resiliency risks. By analyzing and articulating vulnerabilities, you will enable us to enhance our security strategy and mitigate risks.

Job Responsibilities:

• Develop and implement operational plans and strategies that align with organizational objectives
• Lead risk-driven testing and simulations, including penetration tests, technical controls assessments, cyber exercises, and resiliency simulations
• Create comprehensive assessment reports with actionable recommendations and communicate outcomes to leadership
• Escalate thematic trends in observations and report on controls effectiveness and operational risk
• Influence and partner with cross-functional teams to drive continuous improvement through data-driven decisions
• Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, and industry best practices
• Lead engagement with internal and external stakeholders, including industry peers and government agencies, to share insights and contribute to policy development

Required Qualifications, Capabilities, and Skills:

• Demonstrated ability to implement complex assessments or exercises collaboratively with diverse stakeholders, subject matter experts, and senior leaders
• Strong understanding of the current threat landscape and resiliency concerns, as well as relevant laws, regulations, policies, and ethics
• Expertise in security assessment methodologies, threat intelligence utilization, control evaluation techniques, or resiliency testing
• Experience developing and presenting briefings to senior leaders and large audiences, facilitating meetings, resolving conflicts, and providing program updates to senior leaders, regulators, and industry groups

Preferred Qualifications, Capabilities, and Skills:

• BS/MS degree in Cyberspace, Homeland Security, Emergency Management, Information Assurance, or Banking/Finance
• Relevant industry certifications such as CISSP, CISM, or OSCP, demonstrating advanced expertise in cybersecurity and offensive testing methodologies or resiliency
• Familiarity with US and key international financial systems