Senior Cybersecurity Strategy & Risk Lead (Hybrid SF)

TOGETHXR; San Francisco (CA); Hybrid; USD 160,000 - 220,000; Full time

Job summary

Strava is seeking a senior security leader to build and scale the security program, reporting to the CISO. You will run governance, risk management, and AI-enabled risk insights, while directing a small team.

The role emphasizes collaboration with engineering, legal, and product teams to protect the platform and users. You will stand up repeatable processes, define risk thresholds, and present risk information to executives.

Qualifications

• Bachelor's degree in Engineering, Cybersecurity or related field
• 8–12 years of experience in security, cyber risk or related roles
• Security certifications such as CISSP, CISM, or equivalent
• Experience standing up and managing security risk programs and cross-functional execution
• Strong understanding of security controls and collaboration with engineering on implementations
• Ability to translate technical findings into clear risk narratives
• Hands-on technical fluency in threat models, vulnerabilities, incidents
• Experience using AI/automation to improve risk workflows
• Ability to work with ambiguity and manage multiple stakeholders
• Excellent written and verbal communication for risk reporting to leadership

Responsibilities

• Own and advance Strava's security governance, strategy and risk management programs
• Build a repeatable process turning risk signals into a prioritized risk view with thresholds
• Own AI and third-party risk management, delivering meaningful risk insights
• Establish a security steering committee with cross-functional stakeholders
• Develop a multi-year security strategy, roadmap and investment priorities
• Deliver executive- and board-ready risk reporting
• Collaborate with Engineering, Legal, AI Enablement and other teams
• Identify opportunities to use AI/automation to improve risk workflows
• Evolve risk methodology with new data sources and attack patterns
• Lead and grow the security team and function

Skills

Security governance

Risk management

Security controls

Executive risk reporting

Team leadership

Vendor risk management

AI/automation in security

Communication

Education

Bachelor's degree in Engineering or Cybersecurity

Tools

CISSP

CISM

Job description

Strava is seeking a senior security leader to build and scale the security program, reporting to the CISO. You will run governance, risk management, and AI-enabled risk insights, while directing a small team.

The role emphasizes collaboration with engineering, legal, and product teams to protect the platform and users. You will stand up repeatable processes, define risk thresholds, and present risk information to executives.