Director, Cybersecurity and Risk

Director, Cybersecurity and Risk Skip to main content#Director, Cybersecurity and Risk page is loaded## Director, Cybersecurity and Risk Apply locations:
Scottsdale, AZtime type:
Full time posted on:
Posted 2 Days Agojob requisition :
R1485#
** Director, Cybersecurity and Risk
** The Director, Cybersecurity and Risk leads ASU Enterprise Partners’ security risk reduction efforts across enterprise platforms, third-party technology, and institutional initiatives. Serving as the senior security and risk leader within Technology & Solutions, this role partners with Data Governance, OGC, systems and data teams, affiliates, and vendors to implement security expectations consistently across Microsoft, Google, Workday, Salesforce, and other critical systems.

The position focuses on practical risk reduction, secure configuration, access governance, control maturity, data protection, and incident preparedness in close partnership with operational technology owners.##
** What you’ll do**
* ** Security Risk and Control Leadership**  + Lead security risk reduction efforts across systems, vendors, processes, and technology initiatives.  + Implement and operationalize security controls in partnership with infrastructure, identity, endpoint, data, application, and business teams.  + Partner with governance and compliance stakeholders to support security control alignment, audit readiness, remediation tracking, and evidence collection.  + Track security remediation efforts, identify owners, communicate status, and escalate unresolved risks through appropriate governance or leadership channels.  

+ Translate security risks, technical issues, and control gaps into clear business impact for technical and non-technical audiences.  + Develop, update, and maintain security procedures, standards, implementation guidance, and operational documentation in collaboration with governance/compliance stakeholders.
* ** Enterprise Platform Security and Access Governance**  + Own and mature the security posture of enterprise SaaS and cloud platforms, including Microsoft 365, Azure/Entra , Google Workspace/Cloud, Workday, Salesforce, and other business-critical applications.  + Lead security oversight of identity and access controls, including MFA, conditional access, SSO, SAML, OAuth, privileged access, role-based access, service accounts, access reviews, and joiner/mover/leaver security processes.  

+ Establish and maintain secure configuration standards and review processes for enterprise platforms, including tenant hardening, administrative role governance, external sharing controls, audit logging, data protection settings, and integration/API security.  + Partner with platform, infrastructure, identity, endpoint, cloud, SaaS, data, and application teams to implement security controls consistently across environments.  + Participate in design reviews, access reviews, release readiness conversations, and control reviews where security or risk considerations are relevant.
* ** Data Protection, Monitoring, and Incident Readiness**  + Partner with data owners and platform teams to implement data protection controls, including data classification, DLP, secure sharing, access monitoring, retention-aligned safeguards, and protection of constituent, employee, financial, and business-sensitive information.  + Define security logging, monitoring, alerting, and evidence requirements for enterprise platforms and partner with operational teams to ensure appropriate detection and response capabilities are in place.  

+ Support the maintenance of information flow documentation, risk documentation, and safeguards for organizational, subsidiary, university, donor, prospect, and business-sensitive information.  + Support incident response from a security risk and operational readiness perspective, including response plan maintenance, tabletop participation, documentation, escalation, and post-incident improvement.  + Coordinate with Technology & Solutions, governance/compliance, legal, communications, business units, vendors, and leadership during security incidents as appropriate.
* ** Vendor, Third-Party, and Security Advisory Support**  + Manage the vendor security review process, including security questionnaires, vendor documentation review, risk identification, and mitigation recommendations.  + Partner with legal, finance, governance, and compliance stakeholders on vendor security requirements, contract considerations, data protection expectations, and remediation commitments.  + Lead security architecture and risk reviews for major technology purchases, integrations, platform changes, data initiatives, SaaS implementations, and business process changes, ensuring risks are documented, mitigated, or escalated through appropriate channels.  

+ Engage with business units to understand new initiatives, identify security risks, and recommend practical mitigation strategies.  + Lead and actively participate in projects related to information security, security…