executive cyber leader

<div>Director, Cybersecurity Regulatory Engagement (1LOD)

 At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We&rsquo;re seeking a future team member for the role of Director, Cybersecurity Governance, Risk and Controls Regulatory Engagement Lead to join our Cybersecurity team. This role can is in NYC, NY.

Role Summary:

The Director, Cybersecurity Regulatory Engagement (1LOD) is an individual contributor role within Cybersecurity Governance, Risk &amp; Controls (CGRC). Consistent with the First Line of Defense (1LOD) mandate, this role manages and executes cybersecurity regulatory engagement activities contributing to effective risk and control outcomes.

The role supports and contributes to cybersecurity regulatory engagements, including exams, inquiries, remediation activities, new regulatory guidance and regulatory requests, by coordinating inputs, supporting control alignment, and driving disciplined execution. This position reports the Director of Cyber regulatory engagement and plays a critical role in translating regulatory expectations into clear, repeatable, and well-controlled 1LOD execution.

This position requires deep regulatory judgment, and the ability to work directly with cybersecurity leadership, Engineering Controls, and risk partners in a highly regulated environment.

Primary Responsibilities &ndash; 1LOD Alignment

Regulatory Engagement Execution:
<ul>
<li>Execute end‑to‑end cybersecurity regulatory engagements, including regulatory exams, supervisory meetings, remediation activities, and requests for information (RFIs).</li>
<li>Coordinate globally with cybersecurity process owners, control owners, and subject matter experts, to deliver accurate, consistent, and regulator‑ready responses &ndash; additionally, partner closely with Engineering Controls, Technology Risk (2LOD), Internal Audit (3LOD), and other cross‑functional stakeholders to ensure coordinated and well‑governed regulatory execution.</li>
<li>Reinforce a risk-aware culture through disciplined 1LOD execution.</li>
<li>Drive the development of high‑quality regulatory submissions by coordinating input across control owners, subject matter experts, and technical teams.</li>
<li>Reinforce direction and expectations for clear, accurate, and consistent cybersecurity regulatory responses.</li>
<li>Review, challenge, and approve key regulatory responses to ensure alignment with the firm&rsquo;s cybersecurity posture and risk appetite.</li>
<li>Contribute to a centralized regulatory response repository, leveraging AI‑enabled capabilities to improve response quality, consistency, and reuse.</li>
<li>Prepare executive‑level briefings, materials, and talking points for senior management. Including preparing materials for senior management committees and boards.</li>
<li>Partner with Engineering Controls, Risk, Compliance, Legal, and Internal Audit leadership throughout regulatory engagements</li>
<li>Provide status updates and analysis to cybersecurity leadership.</li>
<li>Provide leadership, coaching, and oversight to supporting team members.</li>
<li>Maintain accurate regulatory engagement tracking, documentation, and artifacts in accordance with CGRC governance standards.</li>
<li>Contribute to continuous improvement of regulatory engagement playbooks, job aids, and execution routines.</li>
<li>Support reporting and metrics to provide transparency into regulatory risk, themes, and engagement status.</li>
<li>Support the design, implementation, and assessment of controls addressing regulatory expectations.</li>
<li>Contribute to 1LOD risk and control taxonomies.</li>
<li>Identify control gaps, thematic issues, and systemic risks surfaced through regulatory engagements and partner with control owners to drive remediation.</li> 
<li>
</li></ul>Regulatory Response Management

Stakeholder Management &amp; Communication

Team Leadership, Process Improvement &amp; Reporting

Risk &amp; Control Alignment:

Required Qualifications:
<ul>
<li>12+ years of experience in cybersecurity, technology risk, governance, audit, controls or related technology disciplines.</li>
<li>Extensive experience in regulatory engagements, risk management, audit, or compliance within a large, complex, and highly regulated organization.</li>
<li>Proven track record leading regulatory exams, supervisory interactions, or other types of regulatory engagements.</li>
<li>Experience operating in a First Line of Defense (1LOD) role.</li>
<li>Demonstrated ability to operate effectively at senior leadership and executive levels.</li>
<li>Strong understanding of cybersecurity risk management, control frameworks, and regulatory expectations applicable to financial institutions.</li>
<li>Ability to synthesize complex technical and risk topics into clear, defensible regulatory narratives.</li>
<li>Exceptional written and verbal communication skills, with experience engaging regulators and senior executives.</li>
<li>Strong judgment, executive presence, and the ability to influence outcomes without direct authority.</li>
<li>Ability to manage multiple high‑stakes regulatory engagements concurrently under pressure.</li>
</ul>
At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn
 Here&rsquo;s a few of our recent awards:
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul> 
 
Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. 
 
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $116,000 and $246,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs. 
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</div>

Director, Cybersecurity Regulatory Engagement (1LOD)

Paramount Assure

<div><div>Designation: BD Executive &ndash; Cybersecurity</div><div>
Location: Riyadh &amp; Jeddah, Saudi Arabia</div><div>
Preference: Saudi Nationalities preferred/Any Nationals with Arabic Speaking</div><div>
Experience: Mandatory cybersecurity sales experience</div><div>
</div><div>
Overview:</div><div>
We are seeking a dynamic Cybersecurity Sales Executive to join our growing team in Riyadh and Jeddah. The ideal candidate will have a proven track record in cybersecurity sales and deep familiarity with the KSA market.</div><div>
</div><div>
Key Responsibilities:</div><ul><li>
Drive sales of cybersecurity products and services within the Saudi market.</li><li>
Identify and build relationships with key clients across public and private sectors.</li><li>
Meet or exceed quarterly and annual sales targets.</li><li>
Collaborate with internal technical teams to design and present tailored solutions to clients.</li><li>
Keep abreast of industry trends and competitor activities in the cybersecurity domain.</li><li>
Prepare proposals, presentations, and RFP responses.</li><li>
Develop and manage a robust sales pipeline.</li></ul><div>
</div><div>
Requirements:</div><ul><li>
Minimum 2 + years of direct cybersecurity sales experience.</li><li>
Existing network of relationships in the KSA enterprise and government sectors.</li><li>
Excellent communication and negotiation skills.</li><li>
Bachelor's degree in business, IT, or a related field.</li></ul></div><div></div>

BD Executive – Cybersecurity

Deloitte

<div>Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. 
 
Work You'll Do 
<ul><li>
Lead cybersecurity strategy and execution across mission programs, including security risk management and cyber-informed decisioning.
</li><li>Translate technical and mission needs into clear recommendations for senior stakeholders across a complex ecosystem.</li><li>
Drive solution development and go-to-market activities for space cyber capabilities and differentiated offerings.</li><li>
Support delivery and growth for sensitive/classified space programs, coordinating across multiple stakeholders.</li><li>
Build coalitions and influence policy/standards that improve cybersecurity outcomes.</li><li>
Shape and mature mission cyber implementations across cyber platforms and supporting ground/enterprise environments.</li><li>
Advise on tool selection and integration for Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Network Detection and Response (NDR), and OT-specific monitoring platforms.
</li><li>Translate architecture decisions into detection use cases and maintain log parsing/normalization standards.
</li><li>Partner with SOC analysts, detection engineers, and incident responders to ensure sensor data availability, integrity, and operational usefulness for threat hunting and response.
</li><li>Provide senior stakeholder advisory: executive communications, decision briefings, and alignment across engineering, cybersecurity, and mission organizations.
</li><li>Drive governance artifacts and compliance alignment, including sensor inventories, data flow diagrams, and coverage matrices, aligned to Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and NIST SP 800-137 (continuous monitoring).
</li></ul> 
The Team 
 
Deloitte's Government and Public Services (GPS) practice - our people, ideas, technology, and outcomes-are designed for impact. Serving federal, state, &amp; local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise. 
 
Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products. 
 
Qualifications 
 
Required:
 
<ul><li>Bachelor's degree required.</li><li>
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.</li><li>
Active TS/SCI clearance.</li><li>
10+ years of relevant experience across cybersecurity, mission/engineering environments, and senior stakeholder advisory (consulting or client-service experience strongly preferred).
</li><li>At least 3+ years experience within any three of the following skills or areas:</li><li><ul><li>
Demonstrated ability to drive change through strategy/policy, cross-organization alignment, thought-leader engagement and executive communication.
</li><li>Strong background in security risk management, resolving security policy conflicts, and applying threat intelligence to operational decisions.
</li><li>Experience with contracting/teaming and multi-party agreements.
</li></ul></li><li><ul><li>OT/ICS logging and monitoring
</li><li>Log analysis
</li></ul></li><li>Ability to work in Huntsville, AL.</li></ul></div>

Cyber Senior Manager

CVS Health

<div>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.<h2 class="jobSectionHeader">
Position Summary</h2>
The Vice President, Cyber Defense &amp; Threat Intelligence is a senior executive responsible for designing, building, and operating CVS Health's global defensive cyber capability. This leader commands the enterprise Security Operations Center (SOC), Computer Security Incident Response Team (CSIRT), Cyber Threat Intelligence (CTI) program, Insider Risk Operations, Artificial Intelligence Security Operations (AI SecOps), Security Data Analytics, Penetration Testing, Red/Blue Team operations, and Crisis Incident Response &mdash; A unified platform protecting one of the nation's largest healthcare enterprises and the sensitive personal health information of more than 180 million Americans. 
Reporting directly to the CISO, this role is the company's senior operational defender and primary technical authority during significant cyber events. The VP operates within CVS Health's CISO leadership team and will build a culture of precision, speed, and mission orientation across a multi-disciplinary team, translating intelligence into prevention and detection while ensuring that operational outcomes meet the expectations of regulators, the Board, and executive leadership.<h2 class="jobSectionHeader">
Key Responsibilities</h2>
Security Operations Center (SOC)
<ul><li>Own 24x7x365 enterprise SOC operations, ensuring continuous monitoring, detection, and triage across on-premises, cloud, and hybrid environments.</li><li>
Drive SOC maturity through automation, SOAR playbook development, and metrics-driven performance management &mdash; targeting measurable reductions in mean time to detect (MTTD) and mean time to respond (MTTR).</li><li>
Ensure SOC staffing, tooling, and process design meets HIPAA, PCI-DSS, and applicable state regulatory expectations for continuous monitoring of PHI/PII environments.</li><li>
Lead vendor and MSSP relationships supporting SOC augmentation, establishing clear SLAs and escalation protocols.</li></ul>
Cyber Threat Intelligence (CTI)
<ul><li>Establish and mature an enterprise CTI program that delivers operationally relevant, decision-ready intelligence to executive, technical, and legal stakeholders.</li><li>
Maintain active participation in sector-specific intelligence sharing communities (H-ISAC, FS-ISAC where applicable) and government partnerships (CISA, FBI, HHS/OCR).</li><li>
Develop geopolitical and nation-state threat awareness programs that inform executive decision-making and enterprise risk posture.</li><li>
Integrate CTI feeds directly into SOC detection logic, vulnerability prioritization, and red team planning.</li></ul>
Computer Security Incident Response Team (CSIRT)
<ul><li>Lead CSIRT operations responsible for classification, investigation, containment, eradication, and recovery of all significant security events.</li><li>
Own incident response plans, runbooks, and tabletop exercise programs &mdash; ensuring alignment with legal counsel, privacy, compliance, and communications teams.</li><li>
Serve as primary technical authority for all Severity 1 and Severity 2 security incidents; ensure appropriate executive and regulatory notification in accordance with applicable breach notification laws (HIPAA, state data breach statutes, SEC cybersecurity disclosure rules).</li><li>
Maintain chain-of-custody and forensic evidence standards that support potential litigation, regulatory investigation, or law enforcement cooperation</li></ul>
Insider Risk Operations
<ul><li>Build and operate a formal Insider Risk program capable of detecting, investigating, and responding to malicious, negligent, and compromised insider threats at enterprise scale.</li><li>
Partner with Human Resources, Legal, and Employee Relations to ensure insider risk investigations are legally defensible, appropriately scoped, and compliant with applicable employment law and privacy regulations.</li><li>
Design behavioral analytics and UBA/UEBA detection capabilities that distinguish anomalous from malicious activity while minimizing employee privacy intrusions.</li><li>
Develop escalation protocols for referral of insider cases to law enforcement or legal action where appropriate.</li></ul>
Artificial Intelligence Security Operations (AI SecOps)
<ul><li>Establish CVS Health's enterprise AI Security Operations function &mdash; responsible for monitoring, detecting, and responding to threats targeting AI/ML systems, LLMs, agentic workflows, and AI-powered business processes.</li><li>
Develop detection and response capabilities for emerging AI threat vectors including prompt injection, model extraction, adversarial inputs, training data poisoning, and AI supply chain risk.</li><li>
Partner with the Enterprise AI Platform team to embed security monitoring into AI pipelines, model governance workflows, and API integrations.</li><li>
Develop and publish AI security incident response playbooks specific to healthcare regulatory context and PHI exposure risk.</li></ul>
Security Data Analytics &amp; SIEM/SOAR Engineering
<ul><li>Own the enterprise security data platform &mdash; including SIEM architecture, data lake engineering, telemetry ingestion pipelines, and security analytics &mdash; ensuring full visibility across the environment.</li><li>
Lead development of advanced detection analytics, behavioral models, and machine learning-assisted threat hunting capabilities.</li><li>
Establish and maintain security data governance standards, ensuring log retention, integrity, and availability consistent with legal hold, regulatory, and forensic requirements.</li></ul>
Drive measurable improvement in detection fidelity &mdash; reducing false positive rates while increasing signal quality across all detection layers.
Penetration Testing
<ul><li>Manage the enterprise penetration testing program &mdash; including internal assessments, application testing, red team operations, and third-party engagements &mdash; on a risk-prioritized schedule.</li><li>
Ensure testing scope covers traditional infrastructure, cloud-native environments, AI/ML systems, mobile applications, API surfaces, and physical security where relevant.</li><li>
Drive clear, actionable reporting of findings to technical owners and executive leadership, with tracked remediation metrics.</li><li>
Maintain compliance with regulatory testing requirements (e.g., PCI-DSS penetration testing mandates, HIPAA technical safeguard assessments).</li></ul>
Adversarial Operations
<ul><li>Lead a mature adversary simulation program that continuously stress-tests CVS Health's detection and response capability against real-world threat actor TTPs, including nation-state and financially motivated adversaries.</li><li>
Operate Purple Team exercises that close the loop between red team findings and blue team detection improvements &mdash; with documented, measurable outcomes.</li><li>
Ensure red team operations are appropriately scoped, legally authorized, and operationally deconflicted with SOC to avoid unintended disruption.</li><li>
Leverage MITRE ATT&amp;CK framework as the common language for adversary emulation, detection coverage assessment, and security control validation.</li></ul>
Incident Crisis Response &amp; Executive Communication
<ul><li>Serve as the senior operational executive during declared cyber crises &mdash; coordinating technical response, legal liaison, executive briefings, and regulatory notification timelines in close collaboration with the SVP, Deputy CISO and other CISO leadership team members.</li><li>
Develop and maintain the enterprise Cyber Crisis Management Plan in coordination with Enterprise Risk Management, Legal, Communications, and Board-level stakeholders.</li><li>
Own communications to the CISO, SVP, CFO, CEO, Board Audit Committee, and external regulators during significant incidents &mdash; ensuring precision, legal accuracy, and appropriate confidentiality.</li><li>
Lead post-incident review processes that produce legally defensible records, root cause analysis, and measurable control improvements.</li></ul><h2 class="jobSectionHeader"> 
Leadership &amp; Organizational Responsibilities</h2><ul><li>
Recruit, develop, and retain a high-performing, diverse team of cyber defense professionals across SOC, CSIRT, threat intelligence, and offensive/defensive security disciplines.</li><li>
Establish a culture of continuous improvement, threat-informed defense, and mission orientation that operates effectively under pressure.</li><li>
Develop annual operating budgets, headcount plans, and vendor strategy for all functions within scope; present business cases for investment with clear ROI framing.</li><li>
Represent cyber defense operations in executive forums, Board presentations, regulatory examinations, and external audits.</li><li>
Partner with the CISO and SVP, Deputy CISO on enterprise security strategy, architecture, and policy</li></ul>
&mdash; ensuring all cyber defense operations are aligned with enterprise-wide security direction and that the VP's functional scope is clearly delineated from adjacent leadership mandates.<ul><li>
Serve as a visible external representative of CVS Health's security posture through industry conferences, regulatory engagement, and peer collaboration.</li></ul><h2 class="jobSectionHeader">
Required</h2><ul><li>
15+ years of progressive cybersecurity leadership experience, with a minimum of 8 years in senior leadership roles overseeing enterprise-scale security operations.</li><li>
Demonstrated experience leading or significantly maturing a 24x7 SOC, CSIRT, and/or threat intelligence function in a large, complex enterprise environment.</li><li>
Proven track record of leading significant cyber incident response events &mdash; including ransomware, nation-state, and insider threat scenarios &mdash; at enterprise scale.</li><li>
Deep technical fluency across core cyber defense domains: SIEM/SOAR, endpoint detection and response (EDR), network security monitoring, cloud security monitoring (AWS, Azure, GCP), and threat intelligence platforms.</li><li>
Strong executive communication skills &mdash; able to translate complex technical findings into precise, actionable, and legally defensible communications for C-suite and Board audiences.</li><li>
Experience operating in highly regulated industries with significant personal data obligations (healthcare, financial services, retail, or equivalent).</li><li>
Familiarity with HIPAA Security Rule, NIST CSF, NIST SP 800-53, CIS Controls, MITRE ATT&amp;CK, and applicable state data breach notification laws.</li><li>
Experience leading insider risk or behavioral analytics programs with appropriate HR/Legal partnership.</li></ul><h3 class="jobSectionHeader">
Preferred</h3><ul><li>
Healthcare industry experience with direct exposure to HIPAA/HITECH compliance, OCR investigation response, and healthcare-specific threat actor activity.</li><li>
Experience building or maturing AI/ML security operations capabilities &mdash; including detection of prompt injection, adversarial ML, and AI supply chain risk.</li><li>
Background in red team or offensive security operations (OSCP, GXPN, or equivalent).</li><li>
Legal or compliance background, or demonstrated experience working closely with legal counsel in incident response, regulatory notification, and litigation support contexts.</li><li>
Experience testifying before regulatory bodies, law enforcement, or legislative committees.</li><li>
Prior experience at CISO level or as a direct CISO report in a Fortune 50 or equivalent organization</li></ul>
Certifications (Preferred) 
CISSP
CISM
GCIA / GCIH / GREM
GCFE / GCFA (Forensics)
OSCP / GXPN (Offensive)
AWS/Azure/GCP Security Specialty
SANS GSOM / GSE
CISA
Pay Range
The typical pay range for this role is:
$0.00 - $0.00 
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program. 
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.
Great benefits for great people
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. 
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. 
Additional details about available benefits are provided during the application process and on Benefits Moments. 
We anticipate the application window for this opening will close on: 05/11/2026
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</div>

VP, Cyber Defense & Threat Intelligence

Search 10000+ Executive cyber leader jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 executive cyber leader jobs Near Me

Director, Cybersecurity Regulatory Engagement (1LOD)

BD Executive – Cybersecurity

Cyber Senior Manager

VP, Cyber Defense & Threat Intelligence

VP, Cyber Defense & Threat Intelligence

VP, Cyber Defense & Threat Intelligence

VP, Cyber Defense & Threat Intelligence