Managing Director - Frontier Model Security and Cyber Resilience

This leader will serve as the enterprise lead responsible for driving TIAA's strategy and preparedness in response to the risks posed by frontier AI models and AI-enabled threats. This leader will own the development of strategy and oversee implementation while reporting overall program progress to executive leadership. A core focus of this role is building and advancing TIAA's preparedness posture against cybersecurity risks introduced by frontier AI models, including the accelerating volume of vulnerabilities, increasing threat complexity, and shrinking windows between vulnerability discovery and exploitation.

In parallel, this leader will design and drive the adoption of AI-enabled defensive capabilities and resiliency frameworks necessary to keep pace with the rapidly evolving cyber threat landscape. This includes engaging and evaluating third-party vendors to assess their own AI preparedness and ensure their capabilities align with TIAA's evolving security requirements and risk standards.

The role requires strong executive presence and the ability to influence without direct authority, as it demands close collaboration across a broad range of internal technology stakeholders - including the Chief Technology Office and multiple CIO organizations - as well as business partners and external partners, to align priorities, mobilize resources, and coordinate the enterprise's response to emerging cyber risks. This leader will serve as a key voice to executive leadership on the state of the program, surfacing risks, progress, and strategic recommendations on an ongoing basis.

Key Responsibilities and Duties

• Leads the development and oversight of TIAA's enterprise-wide preparedness and response program designed to defend against AI-enabled attacks, exploits, and the cybersecurity risks introduced by emerging and evolving frontier AI models. This includes leveraging frontier AI models for vulnerability identification across the organization's software codebases and for cyber defense purposes. The scope of this program spans a broad range of initiatives including vulnerability and patch management acceleration, compensating controls effectiveness and coverage, perimeter hardening, end-of-life and end-of-support remediation acceleration, network hygiene, AI-enabled Security Operations Center (SOC) capabilities, AI-driven vulnerability identification, and subsidiary and vendor risk management.
• Partners with and influences enterprise IT teams across the Chief Technology Office and multiple CIO organizations to ensure timely and effective remediation, including patch management, across the technology landscape.
• Drives accountability among IT and Business Leader asset owners for SLA compliance related to vulnerability remediation, escalating persistent gaps in performance and leading resolution efforts across both internal and external application portfolios.
• Develops and delivers regular program status updates, risk dashboards, and strategic briefings to executive leadership and relevant governance bodies, providing transparency into program health, emerging risks, and remediation progress.
• Oversees program budget planning and governance, ensuring investments are prioritized effectively and aligned to the organization's risk appetite and strategic objectives, while maintaining rigorous oversight of program milestones, resources, and delivery outcomes.
• Collaborates with Cybersecurity Architecture, Engineering, and Operations teams to develop and advance an AI-enabled cyber controls strategy aligned to the NIST Cybersecurity Framework, ensuring TIAA's defenses evolve in step with the changing threat environment.
• Represents TIAA in external industry forums and strategic partnerships, actively contributing to and shaping the broader cybersecurity landscape with a particular emphasis on the financial services sector.

Educational Requirements

• University (Degree) Preferred

Work Experience

• 10+ Years Required
• 3+ Years Required with AI-implementations in the cybersecurity industry

Physical Requirements

• Physical Requirements:
  
  Sedentary Work

Career Level 12PL

REQUIRED QUALIFICATIONS:

• 10+ years' experience in IT and/or cybersecurity
• 3+ years' experience with AI-implementation in cybersecurity

PREFERRED QUALIFICATIONS:

• Cybersecurity experience working in a regulated environment such as financial services

Related Skills

Accountability, Adaptability, Business Continuity Planning, Cloud Computing Security, Collaboration, Communication, Compliance, Consultative Communication, Cybersecurity, Detail-Oriented, General Risk Management, Network Security, Prioritizes Effectively

Anticipated Posting End Date:

Base Pay Range: $230,000/yr - $322,000/yr

Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location. In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive…