Director, Cybersecurity (Governance, AI Trust and Assurance)

What you'll do

• Lead the Governance and Oversight team and set strategic direction for enterprise cyber governance, independent assurance and risk oversight
• Develop, maintain and enhance enterprise-wide cybersecurity, AI security, technology risk and assurance frameworks, policies, standards and control requirements
• Establish governance and assurance mechanisms for secure, responsible adoption of digital, AI and emerging technologies
• Partner with the CISO to provide independent oversight and effective challenge on material cyber, AI and emerging technology risks
• Advise senior management and governance committees on significant risks, control gaps, strategic implications and decisions requiring judgement
• Monitor regulatory, industry and technology developments and translate them into practical governance and assurance enhancements
• Champion Responsible Innovation and embed secure-by-design, resilient-by-design and assurance-by-design principles across the technology lifecycle
• Partner with Business Units, Technology and other stakeholders from ideation through design, build, testing, deployment and operation
• Shape proportionate guardrails and assurance approaches supporting business agility while safeguarding security, resilience and stakeholder confidence
• Provide strategic risk advice on digital transformation, data, automation, cloud, AI, autonomous agents and emerging technologies
• Translate risk appetite, policy and standards into clear practical requirements enabling responsible adoption at pace
• Serve as Cyber relationship lead and trusted advisor for assigned Business Units
• Build relationships with business leaders and understand their strategies, operating priorities, digital needs, investment plans and technology roadmaps
• Establish early and continuous engagement so Cyber is involved upfront in material digital, AI and emerging technology initiatives
• Bring together appropriate Cyber capabilities to support secure design, build and deployment of business solutions, fostering shared ownership of cyber resilience and responsible innovation
• Translate business objectives into risk-informed cyber, trust and assurance priorities and communicate technology risk in clear business terms
• Lead governance, risk assessment and independent assurance of AI systems, models, autonomous agents and emerging technology deployments
• Establish and mature risk-based methodologies for AI securi