Director, Cyber Resilience and Risk Strategy
About The Position
The Director of Cyber Resilience and Risk Strategy is responsible for leading eSentire's CISO & Advisory Services that includes cyber resilience, risk advisory, governance, and strategic consulting capabilities. This role serves as a trusted advisor to executive leadership, boards of directors, and client stakeholders, helping organizations understand, manage, and reduce cyber risk while building sustainable cyber programs. The Director combines deep cybersecurity expertise with business acumen to develop strategies, frameworks, assessments, and transformation roadmaps that align security investments with organizational objectives, regulatory requirements, and evolving threat landscapes. The role also contributes to the growth of eSentire's Advisory Services practice through service innovation, thought leadership, team mentorship, client relationship management, and sales support.
Requirements
- Bachelor’s degree in information security, Computer Science, Information Technology, Business, Risk Management, or equivalent experience.
- 10+ years of cybersecurity, risk management, governance, or technology leadership experience.
- 5+ years leading complex cybersecurity consulting or advisory engagements.
- Experience presenting to executive leadership teams and boards.
- Experience developing cybersecurity strategies, resilience roadmaps, and governance programs.
- Experience managing client relationships and professional services engagements.
- Deep understanding of: Cyber Resilience, Enterprise Risk Management, Security Governance, Incident Response, Business Continuity & Disaster Recovery, Security Architecture, Third-Party Risk Management, Cloud Security, Security Operations, Regulatory Compliance, AI Governance.
- Strong knowledge of frameworks such as: NIST CSF 2.0, ISO 27001, CIS Controls, NIST 800-53\800-171, SOC 2, PCI DSS, HIPAA
Nice To Haves
- CISSP, CISM, CRISC, CISA, CBCP, CCSP, AAISM
Responsibilities
- Lead delivery quality and methodology development across cyber advisory engagements.
- Mentor and coach CISO & Advisory team members.
- Establish standards, templates, tools, and delivery approaches for advisory services.
- Contribute to resource planning, talent development, and capability growth.
- Support onboarding activities for advisory resources.
- Support sales pursuits, proposal development, Statements of Work (SOWs), and client presentations.
- Assist account teams in identifying opportunities to expand cybersecurity services.
- Build and maintain executive-level client relationships.
- Develop new service offerings aligned to emerging market demands.
- Represent eSentire through thought leadership, presentations, industry events, and strategic partnerships.
- Act as a senior trusted advisor to client executives, boards, and cybersecurity leaders.
- Develop enterprise cyber strategies and multi-year security transformation roadmaps.
- Guide organizations in establishing governance structures, resilience programs, and cybersecurity operating models.
- Advise clients on cyber risk management, regulatory compliance, and security program maturity initiatives.
- Facilitate executive and board-level cyber risk discussions.
- Lead cybersecurity assessments aligned to recognized frameworks including NIST CSF, ISO 27001, CIS Controls, NIST 800-53\800-171, SOC 2, PCI DSS, HIPAA, and other regulatory requirements.
- Design and oversee cyber resilience reviews, maturity assessments, gap assessments, and strategic program evaluations.
- Develop risk quantification methodologies and risk-based prioritization approaches.
- Support the creation and enhancement of: Cyber Risk Management Frameworks, Information Security Programs, Security Governance Models, Incident Response Programs, Business Continuity and Disaster Recovery Strategies, Third-Party Risk Management Programs, Security Metrics and KPI/KRI Frameworks.
- Develop executive briefings, board presentations, and strategic assessment reports.
- Translate technical findings into business-focused risk discussions.
- Present recommendations to C-suite stakeholders and boards of directors.
- Communicate cyber metrics and program maturity in a language aligned with business objectives.
- Monitor evolving cyber threats, regulatory developments, and industry trends.
- Evaluate emerging technologies, resilience methodologies, and risk management approaches.
- Contribute to the development of intellectual property, frameworks, and consulting methodologies.
- Support innovation initiatives that enhance eSentire's advisory and resilience services.
Benefits
- Eligible for an annual performance-based bonus tied to personal and company performance.
- Competitive benefit program
- Paid parental leave
- Matching RRSP program
- Competitive employee referral bonus
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
