Cybersecurity Strategy & Risk Leader

Strava; United States; Hybrid; USD 180,000 - 280,000; Full time

Benefits offered by this job

Strava employee benefits

Job summary

Strava is hiring a senior security leader to build and run a data-driven risk program. You will oversee security governance, strategy, and risk management with a small team, reporting to the CISO.

The role blends hands-on work with people management and requires partnering across Engineering, Legal, and AI teams. You’ll establish a multi-year security roadmap, drive risk reporting to executives and the board, and shape AI-enabled risk processes in a high-growth consumer tech environment at

Qualifications

• Bachelor's degree in Engineering, Cybersecurity or related field.
• 8–12 years in security, cyber risk, or related roles.
• Security certifications such as CISSP or CISM.
• Proven ability to stand up and run risk programs end-to-end.
• Strong understanding of security controls and engineering collaboration.
• Experience translating technical findings into risk narratives.
• Hands-on fluency with threat models, vulnerabilities, or incident data.
• Experience using AI/automation to improve risk workflows.

Responsibilities

• Own Strava's security governance, strategy and risk management programs with a small team.
• Build a repeatable process turning risk signals into a prioritized view for execs.
• Own AI and third-party risk management with meaningful risk insights.
• Establish a security steering committee with stakeholders.
• Develop a multi-year security strategy, roadmap, and investments.
• Deliver regular risk reporting to executives and board.
• Collaborate with Engineering, Trust & Safety, Legal, AI Enablement.
• Identify opportunities to use AI/automation to improve risk workflows.

Skills

Security governance

Risk management

Cross-functional leadership

AI/automation in security

Threat modeling

Vendor risk management

Executive risk reporting

Security controls

Education

Bachelor's degree in Engineering or Cybersecurity

Job description

Strava is hiring a senior security leader to build and run a data-driven risk program. You will oversee security governance, strategy, and risk management with a small team, reporting to the CISO.

The role blends hands-on work with people management and requires partnering across Engineering, Legal, and AI teams. You’ll establish a multi-year security roadmap, drive risk reporting to executives and the board, and shape AI-enabled risk processes in a high-growth consumer tech environment at