Head of Human Risk & Behavioral Security Programs

Jobtailor; Sterling (VA); On-site; USD 140,000 - 200,000; Full time

Job summary

Jobtailor in Sterling, VA seeks a senior leader to define and own the enterprise Human Risk Management strategy, partnering with multiple departments to embed risk practices across the organization, including legal, privacy, IT, and product teams, while aligning with regulatory requirements.

You will build and guide a small expert team, leverage analytics and AI to identify high‑risk cohorts, and implement in‑the‑moment behavioral guidance to reduce exposure, drive secure-by-default adoption,

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 8+ years in cybersecurity, information security, or closely related fields.
• 3+ years leading programs and/or people.
• Hands-on familiarity with phishing-simulation and human-risk platforms.
• Working knowledge of NIST Cybersecurity Framework (CSF) 2.0.
• Strong command of modern and AI-enabled threats.
• Experience building programs with privacy-by-design.

Responsibilities

• Define and own the enterprise Human Risk Management strategy.
• Establish governance for the human-risk domain.
• Build, lead, and develop a small expert team.
• Partner with multiple departments to embed risk practices.
• Use analytics and AI to identify high-risk cohorts.
• Implement in-the-moment behavioral guidance.

Skills

Phishing simulation

Human risk platforms

AI threats awareness

Cybersecurity

Privacy by design

Program leadership

Education

Bachelor’s degree or equivalent practical experience

Job description

Jobtailor in Sterling, VA seeks a senior leader to define and own the enterprise Human Risk Management strategy, partnering with multiple departments to embed risk practices across the organization, including legal, privacy, IT, and product teams, while aligning with regulatory requirements.

You will build and guide a small expert team, leverage analytics and AI to identify high‑risk cohorts, and implement in‑the‑moment behavioral guidance to reduce exposure, drive secure-by-default adoption,