Director, Global Cybersecurity Risk Management

Phaxis; New York (NY); On-site; USD 180,000 - 230,000; Full time

Job summary

Phaxis is seeking an experienced cybersecurity risk leader to provide strategic oversight across global operations. The role requires aligning risk management with the Enterprise Risk Management framework and business objectives, while leveraging hands-on technical expertise to guide risk mitigation.

The role involves governance development, executive communication of risk exposure, and leading cross-functional teams to strengthen enterprise-wide cyber risk culture.

Responsibilities

• Provide strategic leadership and oversight of cybersecurity risk management across global operations.
• Align risk program with ERM framework and risk appetite.
• Leverage hands-on technical cybersecurity experience to assess control effectiveness and guide risk mitigation.
• Establish and enhance governance frameworks, policies, standards, and controls.
• Partner with executives and stakeholders to communicate risk exposure and remediation priorities.
• Present risk assessments, KRIs, remediation progress to senior executives and governance forums.
• Oversee risk assessments, vulnerability management, endpoint protection, firewall configurations, testing and remediation initiatives.
• Drive continuous improvement incorporating evolving threats, regulatory requirements, standards, and lessons learned from incidents.
• Lead cross-functional, geographically dispersed teams to strengthen risk ownership and translate technical risks into actionable business decisions.

Job description

Provide strategic leadership and oversight of cybersecurity risk management, ensuring alignment with the company's Enterprise Risk Management (ERM) Framework, risk appetite, and business objectives across global operations.

Leverage prior hands-on technical cybersecurity experience with firewalls, endpoint security, network security, intrusion detection and prevention systems, and other security technologies to assess control effectiveness and guide risk mitigation strategies.

Establish, maintain, and enhance global cybersecurity risk governance frameworks, policies, standards, and controls to identify, assess, monitor, and mitigate enterprise-wide cyber risks across regions and business units.

Partner with global executive leadership, IT, Information Security, Compliance, Legal, and business stakeholders to communicate cyber risk exposure, emerging threats, control gaps, and mitigation priorities.

Present cybersecurity risk assessments, key risk indicators (KRIs), remediation progress, and risk exposure to senior executives, global risk committees, and other governance forums, demonstrating strong executive presence and communication skills.

Oversee cybersecurity risk assessments, vulnerability management, endpoint protection, firewall configurations, security control testing, and remediation initiatives, ensuring consistent execution and accountability across global environments.

Drive continuous improvement of the global cybersecurity risk management program by incorporating evolving threat landscapes, international regulatory requirements, industry standards, and lessons learned from security incidents.

Lead and influence cross-functional, geographically dispersed teams to strengthen cybersecurity risk ownership, promote consistent security practices, and foster a strong global risk culture while translating complex technical risks into actionable business decisions.