Associate Executive Vice President Cyber Defense

State Employees' Credit Union•Raleigh, NC

5d•Hybrid

About The Position

The Associate Executive Vice President, Head of Cyber Defense provides senior leadership and strategic direction for SECU’s enterprise cyber defense capabilities. The role ensures cybersecurity strategy, operations, and investments align with business objectives, enterprise risk appetite, regulatory obligations, and long-term information technology strategy. As a senior member of the Information Security leadership team, this position partners with the Chief Security Officer (CSO) to establish security priorities, manage material cyber risks, strengthen enterprise resilience, and integrate cybersecurity into business and technology decisions. The leader directs the development of modern, risk-based security engineering and control capabilities, oversees cyber defense organizational performance and investment priorities, and develops cybersecurity leaders. The position requires expert judgment and enterprise-wide leadership, including readiness to assume broader security leadership responsibilities. The role is primarily in an office environment with physical proximity to other employees; remote work arrangements are negotiable. It involves regular engagement with executive leadership, business stakeholders, technology teams, regulators, auditors, vendors, and external partners. Availability may be required for significant cybersecurity incidents, executive briefings, regulatory matters, and other time-sensitive enterprise security events. Physical requirements include sitting for extended periods, operating a computer keyboard and other office equipment, using a telephone, and lifting up to five pounds.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Business Administration, or a related field.
At least 12 years of progressive experience in cybersecurity, information security, or related technology disciplines.
At least 7 years of leadership experience, with responsibility for teams, senior technical leaders, enterprise programs, or complex cross-functional initiatives.
Demonstrated experience developing and executing enterprise cybersecurity strategies, multi-year roadmaps, security governance frameworks, and risk management programs.
Proven ability to oversee complex security initiatives, evaluate material cyber risks, manage strategic investments and budgets, address regulatory and audit requirements, and influence enterprise business and technology decisions across multiple organizational functions.
Demonstrated ability to advise executive leadership, communicate material cybersecurity risks in business terms, influence strategic decisions, and lead across business and technology organizations.
Exceptional strategic planning, analytical, financial, negotiation, and decision-making skills.
Proven ability to develop senior leaders, manage organizational change, establish accountability, and align cybersecurity priorities with enterprise objectives.

Nice To Haves

Bachelor’s and master’s degrees in Cybersecurity, Information Technology, Computer Science, Business Administration, or a related field.
Relevant professional certifications such as CISSP, CISM, CCSP, or GIAC.
At least 15 years of progressive cybersecurity experience and 10 years of leadership experience.
Executive or senior leadership responsibility across multiple security disciplines, such as cyber defense, security architecture, identity and access management, cloud security, incident response, threat management, and enterprise security risk.
Experience in financial services, credit unions, or other highly regulated industries.
Experience advising executive leadership and presenting cybersecurity defense strategy, material enterprise risks, investment priorities, and security performance to executive committees or board-level audiences.
Experience leading regulatory examinations, managing significant security incidents, overseeing enterprise security transformation, and contributing to executive succession planning or serving in a deputy or equivalent senior security leadership capacity.

Responsibilities

Partner with the CSO to establish and execute enterprise cybersecurity strategies, priorities, and multi-year roadmaps aligned with business objectives, risk appetite, regulatory obligations, and technology transformation.
Assess the evolving threat landscape, evaluate material enterprise risks, establish strategic priorities, and influence business and technology decisions to strengthen SECU’s security posture.
Provide senior expertise and oversight of cyber defense strategy, capabilities, and operational effectiveness, including threat intelligence, monitoring, detection, investigation, incident response, and recovery.
Collaborate strategically with security architecture, engineering, infrastructure, cloud, application, and technology leaders to modernize security capabilities, implement risk-based controls, strengthen resilience, and prepare for emerging threats and technologies.
Advise the CSO and business stakeholders on material cyber risks, security strategy, mitigation priorities, regulatory matters, and investment decisions.
Establish collaborative relationships across Lines of Business, IT, Enterprise Architecture, Risk, Compliance, Audit, Legal, and external partners to embed security into enterprise governance, strategic planning, business transformation, and technology delivery.
Build, lead, and develop a high-performing cybersecurity organization, including senior managers, senior technical leaders, and specialized professionals.
Establish organizational structures, leadership accountability, performance expectations, succession planning, and talent development strategies; foster collaboration, innovation, operational excellence, responsible risk-taking, and continuous improvement.
Establish executive-level KPIs, KRIs, and reporting to measure cybersecurity effectiveness, risk exposure, operational resilience, and strategic progress.
Communicate material risks, security incidents, investment needs, and performance outcomes to executive leadership; represent the CSO when delegated and support enterprise security leadership continuity and succession planning.
Manage Cyber Defense financial strategy, annual budget, workforce plans, and resource allocation priorities.
Direct investment decisions and portfolio prioritization based on enterprise risk, regulatory requirements, business value, operational effectiveness, and strategic objectives.
Oversee major cybersecurity initiatives, vendor relationships, and business cases to ensure investments deliver measurable security, financial, and operational outcomes.