Global Cybersecurity Risk Director | Governance & Strategy

Phaxis; New York (NY); On-site; USD 180,000 - 230,000; Full time

Job summary

Phaxis is seeking an experienced cybersecurity risk leader to provide strategic oversight across global operations. The role requires aligning risk management with the Enterprise Risk Management framework and business objectives, while leveraging hands-on technical expertise to guide risk mitigation.

The role involves governance development, executive communication of risk exposure, and leading cross-functional teams to strengthen enterprise-wide cyber risk culture.

Responsibilities

• Provide strategic leadership and oversight of cybersecurity risk management across global operations.
• Align risk program with ERM framework and risk appetite.
• Leverage hands-on technical cybersecurity experience to assess control effectiveness and guide risk mitigation.
• Establish and enhance governance frameworks, policies, standards, and controls.
• Partner with executives and stakeholders to communicate risk exposure and remediation priorities.
• Present risk assessments, KRIs, remediation progress to senior executives and governance forums.
• Oversee risk assessments, vulnerability management, endpoint protection, firewall configurations, testing and remediation initiatives.
• Drive continuous improvement incorporating evolving threats, regulatory requirements, standards, and lessons learned from incidents.
• Lead cross-functional, geographically dispersed teams to strengthen risk ownership and translate technical risks into actionable business decisions.

Job description

Phaxis is seeking an experienced cybersecurity risk leader to provide strategic oversight across global operations. The role requires aligning risk management with the Enterprise Risk Management framework and business objectives, while leveraging hands-on technical expertise to guide risk mitigation.

The role involves governance development, executive communication of risk exposure, and leading cross-functional teams to strengthen enterprise-wide cyber risk culture.