Cyber Assurance Manager

Citizens Financial Group•Johnston, RI

1d•Hybrid

About The Position

The Manager, Cyber Readiness & Exercises is responsible for establishing, leading, and continuously maturing the enterprise wide cybersecurity exercise and simulation program. This role oversees the strategy, development, execution, governance, and continuous improvement of cyber exercises and simulations designed to validate organizational preparedness, response capabilities, operational resilience, and alignment with enterprise cyber defense objectives. The Manager, Cyber Exercises & Simulations leads a team of cybersecurity professionals responsible for designing, developing, executing, and assessing exercises across multiple audiences and organizational levels. The role also oversees talent acquisition, development, workforce planning, program governance, documentation, metrics, reporting, and stakeholder engagement to ensure exercises produce measurable outcomes that strengthen organizational cyber resilience. This position is well suited for a cyber exercise and simulation leader who understands how to build and execute realistic and impactful scenarios that strengthen response readiness against cyber threats.

Requirements

8 to 12 years of progressive experience in cybersecurity, cyber operations, incident response, threat intelligence, resilience, security program management, or a related discipline.
3 or more years of people leadership and talent management experience.
Experience designing, facilitating, executing, and evaluating cybersecurity exercises and simulations.
Strong understanding of cyber defense, incident response, threat intelligence, vulnerability management, and operational resilience concepts.
Experience developing and managing enterprise programs, governance processes, metrics, and reporting.
Knowledge of the NIST Cybersecurity Framework and Standards, CRI Profile, and cybersecurity exercise frameworks.
Experience working within large, highly regulated organizations.
Demonstrated ability to influence senior leaders and drive collaboration across functions.

Nice To Haves

Bachelor’s Degree in Security, Computer Science, Information Technology, or a related field, or an equivalent combination of education and experience.
A combination of relevant industry certifications, including but not limited to CISSP, CISM, CRISC, CBCP, or emerging AI and security focused credentials.

Responsibilities

Lead the strategy, governance, maturity, and continuous improvement of the enterprise Cyber Security Exercise & Simulation Program, ensuring alignment with organizational objectives.
Oversee the design, development, execution, and evaluation of cyber exercises and simulations across technical, operational, executive, and business stakeholder audiences.
Develop and maintain a cyber scenario library that incorporates the current state of organizational functions, capabilities, and known gaps.
Establish and maintain program methodologies, procedures, templates, playbooks, and documentation to ensure consistency, quality, and audit readiness.
Ensure exercise scenarios incorporate organizational risks, threat intelligence, emerging cyber threats, industry trends, and evolving adversary tactics, techniques, and procedures.
Define, track, and report program metrics, maturity measures, and effectiveness measures to demonstrate improvements in organizational preparedness and resilience.
Oversee the creation and delivery of exercise findings, after action reports, executive briefings, and recommendations that drive actionable risk reduction and capability enhancement.
Ensure identified findings, gaps, and corrective actions are properly assigned, tracked, remediated, and validated through due diligence processes to achieve sustainable resolution.
Manage and develop a high performing team through talent acquisition, workforce planning, coaching, mentoring, performance management, and career development initiatives.
Partner and collaborate with Cyber Security, Enterprise Resilience, Technology, Risk Management, and senior leadership teams to ensure exercises align with enterprise strategies, policies, standards, regulatory expectations, and emerging threat landscapes.