Manager, Business Security Enablement

Description

JOB DESCRIPTION

Manager, Business Security Enablement

Cybersecurity Technology and Operations

Reports To Director, Cybersecurity Technology and Operations

Team Leadership Five direct reports:
Information Security Architect;
Senior Security Controls Engineer;
Junior Security Controls Engineer; AI Automation and Integration Engineer; SOC Engineer.

Role Profile Hands‑on people and technical delivery leader responsible for building security into business change.

Primary Outcome Execute and deliver the Business Security Enablement portfolio and Cybersecurity Technology Strategic Roadmap with measurable, sustainable operating results.

POSITION SUMMARY

The Manager, Business Security Enablement reports to the Director, Cybersecurity Technology and Operations and leads the team that translates cybersecurity strategy, architecture and risk priorities into scalable, measurable security capabilities embedded in business and technology change. The Manager is accountable for the execution and sustained operation of the Business Security Enablement portfolio: security architecture; cloud, application and Dev Sec Ops  security;

security controls engineering and implementation; security consulting; data loss prevention; and data encryption and cryptographic lifecycle capabilities.

This role turns the Cybersecurity Technology Strategic Roadmap into an integrated, outcome‑based delivery plan. It leads a multidisciplinary team, partners across technology and business functions, and remains hands‑on in architecture, delivery decisions, problem solving and technical escalation. The Manager establishes clear ownership, disciplined execution and practical operating models that are measurable, supportable, resilient and aligned to enterprise risk priorities.

• Translate the Director-approved cybersecurity strategy and 2027–2028 technology roadmap into prioritized work streams, quarterly delivery plans, milestones, technical dependencies, measures, risks and sustained operating ownership.
• Own execution and delivery of the Business Security Enablement roadmap, including control automation, detection and response enablement, risk‑based remediation, cryptographic resilience, secure AI automation and reusable integration capabilities.
• Establish a common delivery backlog, reusable integration patterns and transparent delivery cadence; standardize platforms and data flows before scaling automation.
• Run weekly delivery and operational reviews, monthly KPI/KRI, platform‑performance and risk reviews, and contribute to quarterly architecture, risk and investment‑priority reviews.
• Escalate material delivery blockers, architecture tradeoffs, control gaps, technical debt, resource constraints and residual risks to the Director with clear options and recommendations.

• Lead day‑to‑day delivery of security patterns, technical standards, reference architectures, design reviews and security consulting that build security into business and technology change.
• Guide secure cloud, application, data and hybrid‑technology designs; ensure appropriate threat modeling, secure configuration, protection requirements, implementation guidance and documented design decisions or exceptions.
• Embed security into the software and service delivery lifecycle through Dev Sec Ops  practices, including secure coding guidance, SAST/DAST and dependency‑security integration, CI/CD protections, policy‑as‑code, release evidence and remediation pathways.
• Direct the engineering and implementation of resilient, measurable security controls, including configuration baselines, drift detection, control validation, compensating controls and auditable…