Cyber Risk Strategy & Programs Lead

Duke Careers; Durham (NC); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Duke University’s IT Security Office seeks a Senior Program Manager to shape, communicate, and advance the university's cybersecurity strategy. You will quantify cyber risk, translate findings into clear guidance for leadership, and partner with the CISO and ITSO leaders to steer standards and program direction.

The role suits a data‑driven strategist who can translate complex information into actionable plans, collaborate across diverse teams, and lead cross‑functional initiatives in a

Qualifications

• Bachelor’s degree in a related field with 3+ years in security, audit, analytics, or related areas.
• Or 5+ years of combined education/experience in a related field.
• Strong verbal, written, and analytical communication skills.
• Ability to collaborate across diverse teams and influence through clarity and insight.

Responsibilities

• Assess cyber risk landscape using metrics dashboards and advise on enhancements to improve clarity and risk quantification.
• Advise on development of inventory, tracking, and measurement tools, including dashboards for accounts, devices, servers, network activity and MFA adoption.
• Identify strategic priorities for ITSO initiatives based on metrics, analysis, potential impact, and risk.
• Provide briefings to the security community on trends and implications for decisions.
• Lead project work to align the program with actionable industry best practices.
• Manage embedded security roles to ensure alignment with program priorities.
• Develop materials articulating policies, positions, and security guidance.

Skills

Security experience

Analytics

Risk management

Program management

Communication

Education

Bachelor’s degree in a related field

Tools

Dashboards

Job description

Duke University’s IT Security Office seeks a Senior Program Manager to shape, communicate, and advance the university's cybersecurity strategy. You will quantify cyber risk, translate findings into clear guidance for leadership, and partner with the CISO and ITSO leaders to steer standards and program direction.

The role suits a data‑driven strategist who can translate complex information into actionable plans, collaborate across diverse teams, and lead cross‑functional initiatives in a