Director of IT Security (Strategy & Transformation)

Wolters Kluwer; New York (NY); On-site; USD 180,000 - 280,000; Full time

Job summary

Wolters Kluwer is seeking a Director of Security Strategy & Transformation in New York to lead the enterprise security strategy, risk governance, and strategic program delivery. This senior role reports to the CISO and partners with technology and business leaders to align security outcomes with business objectives.

The candidate will drive multi-year roadmaps, establish security metrics, and lead cross-functional programs across IAM, cloud security, insider risk, and resilience.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Risk Management, Business Administration, or related field.
• Deep knowledge of cybersecurity, risk, compliance, and governance frameworks (NIST CSF, NIST 800-53, ISO 27001, COBIT, SOX, HIPAA, PCI DSS).
• Experience developing executive and board-level communications related to security, risk, transformation, and investment outcomes.

Responsibilities

• Define, evolve, and execute enterprise security strategy, multi-year roadmap, and investment priorities.
• Design and lead the enterprise security operating model including portfolio governance and PMO capabilities.
• Lead enterprise security transformation programs from strategy through adoption and governance.

Skills

Security strategy

Enterprise transformation

Program leadership

Governance

Executive advisory

Education

Bachelor's degree in Computer Science

Master's degree in Cybersecurity / Information Systems / MBA

Certifications: CISSP, CISM, CRISC, CGEIT, PMP

Tools

IAM

Cloud security

Vulnerability management

Job description

• The Director, Security Strategy & Transformation is a senior leadership role responsible for defining, operationalizing, and governing the enterprise security strategy in alignment with business objectives, regulatory requirements, and evolving technology landscapes
• Reporting directly to the Chief Information Security Officer (CISO), this leader partners closely with technology executives, business leaders, and key stakeholders to translate security vision into measurable outcomes, scalable operating models, and sustainable risk reduction
• This highly cross-functional role combines security strategy, enterprise transformation, program leadership, operating model design, and executive advisory capabilities
• The successful candidate will drive strategic initiatives that strengthen the organization’s security posture while enabling innovation, business growth, and operational agility
• Security Strategy & Planning:
• Partner with the CISO and senior technology leaders to define, evolve, and execute the enterprise security strategy, multi-year roadmap, and investment priorities
• Establish and monitor security OKRs, KPIs, and maturity models that align risk reduction, regulatory readiness, and business enablement objectives
• Assess emerging risks and industry trends, including cybersecurity, privacy, insider risk, AI, and regulatory developments, and translate them into actionable strategies and investment decisions
• Develop strategic frameworks that support long-term security, resilience, and business growth objectives
• Operating Model & Program Leadership:
• Design and lead the enterprise security operating model, including strategic planning, portfolio governance, prioritization, and execution oversight across cybersecurity, privacy, and technology risk functions
• Establish and mature portfolio management and PMO capabilities supporting initiatives such as identity and access management (IAM), vulnerability management, cloud security, insider risk, and operational resilience
• Lead complex, enterprise-wide security transformation programs from strategy through implementation and adoption
• Drive accountability through governance structures, performance metrics, and executive reporting
• Executive & Board Engagement:
• Develop executive and board-level communications that clearly articulate security posture, risk exposure, program performance, investment value, and organizational maturity
• Prepare and deliver strategic cybersecurity updates for executive leadership, board committees, and other governance forums
• Translate complex technical and risk concepts into clear business narratives that support informed decision-making
• Serve as a trusted advisor to senior leadership on security strategy, transformation initiatives, and emerging risks
• Risk, Privacy & Regulatory Enablement:
• Translate regulatory, compliance, and privacy requirements into measurable roadmaps and strategic initiatives that balance innovation with effective risk management
• Partner with Legal, Compliance, Audit, and Enterprise Risk Management teams to integrate security strategy into broader risk governance frameworks
• Establish reporting and analytics capabilities that provide consistent visibility into risk, compliance, assurance, and incident response performance
• Support regulatory readiness and audit activities across multiple jurisdictions and industries
• Technology & Innovation Enablement:
• Guide the strategic adoption of cloud, AI/ML, automation, and observability technologies to modernize security operations and enterprise technology platforms
• Evaluate and govern emerging technologies, including AI agents, generative AI capabilities, and semantic search solutions, ensuring security and privacy by design
• Champion scalable, user-centric security solutions that enhance protection while minimizing operational friction
• Partner with technology and product teams to embed security into innovation initiatives and digital transformation efforts
• Leadership & Change Management:
• Lead through influence in highly matrixed environments, aligning engineering, operations, product, risk, and business teams around shared objectives
• Drive organizational change through effective communication, stakeholder engagement, and structured change management practices
• Build and foster communities of practice and centers of excellence that strengthen security capabilities, governance, and execution discipline
• Mentor and develop leaders while promoting a culture of accountability, collaboration, and continuous improvement

Bachelor’s degree in computer science, Information Technology, Cybersecurity, Risk Management, Business Administration, or a related fieldDeep knowledge of cybersecurity, risk, compliance, and governance frameworks, including NIST CSF, NIST 800-53, ISO 27001, COBIT, SOX, HIPAA, and PCI DSSExperience developing executive and board-level communications related to security, risk, transformation, and investment outcomesAbility to translate complex technical, regulatory, and risk requirements into clear business outcomes and recommendationsDemonstrated success designing, scaling, and governing enterprise security programs, including IAM, cloud security, vulnerability management, insider risk, privacy, and resilience initiativesProven success leading organizational change, technology transformation, and cross-functional strategic initiativesFamiliarity with regulatory and compliance requirements across multiple regions, including the United States, European Union, and APACStrong experience in operating model design, portfolio governance, strategic planning, and KPI-driven performance managementExperience designing and implementing automated workflows, integrations, reporting solutions, and operational dashboardsProven experience partnering with CISO, CIO, CTO, or equivalent executive leaders within large, complex organizationsExceptional communication, stakeholder management, and executive presentation skills10+ years of experience in security strategy, enterprise transformation, technology risk, program leadership, management consulting, or related disciplines with progressively increasing responsibilityStrong analytical, strategic thinking, and problem-solving capabilities with the ability to balance risk, operational efficiency, and business objectivesKnowledge of IT operational processes, including change management, incident management, and service management practicesMaster’s degree in Cybersecurity, Information Systems, Business Administration (MBA), or a related fieldIndustry certifications such as CISSP, CISM, CRISC, CGEIT, PMP, or equivalentExperience within highly regulated industries, including healthcare, financial services, software, or technology organizationsExperience supporting enterprise AI governance, responsible AI initiatives, and security strategy for emerging technologies