Director, Global Risk & Resilience Program Governance

Honeywell•Charlotte, NC

About The Position

The Global Director, Risk & Resilience Program Governance is the enterprise leader responsible for the strategy, governance, oversight, and continuous improvement of Honeywell’s resilience program. The program includes Business Continuity, Crisis Management, Technology Resilience, and Incident Management Governance. The role defines and maintains the enterprise resilience framework and establishes minimum program standards, governance requirements, metrics, reporting, training, and maturity expectations across Strategic Business Groups (SBGs) and corporate functions. It partners with SBG Risk & Resilience leaders, who implement and operationalize the program within their businesses, and advises executive leadership and other stakeholders to keep resilience capabilities aligned with business objectives, risk profile, and operational priorities. The role also partners with the Third-Party Cyber Risk and Supplier Resilience leader to align critical suppliers and external partners with enterprise resilience requirements. In addition, it leads governance of Honeywell’s Global Security policies, standards, and Technical Control Manuals, overseeing their lifecycle and working with cross-functional stakeholders to integrate resilience requirements, monitor compliance and control effectiveness, and drive continuous improvement while enabling the business. Success is measured by the maturity and effectiveness of the enterprise resilience program and its governance, oversight, reporting, and implementation across businesses, as well as the effectiveness of Global Security policy, standards, and Technical Control Manual governance.

Requirements

Bachelor’s degree from an accredited institution in a technical discipline such as sciences, technology, engineering, or mathematics.
10 or more years of experience leading enterprise resilience, business continuity, crisis management, operational resilience, technology resilience, or risk management programs.
Demonstrated experience designing, governing, and improving enterprise-wide resilience frameworks, policies, standards, and operating models.
Experience working with executive leadership and influencing strategic decisions in large, complex, global organizations.
Professional certification in Business Continuity, Risk Management, Resilience, Crisis Management, or a related discipline; examples include CBCP, MBCI, CBCI, or CRMP.
Proven experience leading complex, cross-functional initiatives across multiple business units and regions.
Strong analytical and program management skills, including experience using data and metrics to drive decision-making and program maturity.
Exceptional communication, stakeholder management, and executive presentation skills.
Demonstrated experience developing, governing, and managing enterprise policies, standards, control frameworks, and governance processes within a large global organization.
Ability to travel up to 20% domestically and internationally.

Nice To Haves

Deep expertise in Business Continuity, Crisis Management, Technology Resilience, Operational Resilience, and Incident Management.
Experience building and managing enterprise governance programs within a global organization.
Knowledge of third-party risk management, supplier resilience, and critical dependency management.
Strategic mindset and ability to translate risks into practical, business-focused resilience solutions.
Strong leadership and influencing skills, with the ability to drive alignment across diverse stakeholder groups.
Ability to balance enterprise governance responsibilities with practical business needs.
High level of accountability, ownership, and attention to detail.
Passion for organizational preparedness, resilience, and continuous improvement.
Experience leading enterprise governance programs, including policy lifecycle management, standards development, control frameworks, and compliance oversight.
Knowledge of security governance principles, policy management practices, and technical control frameworks.

Responsibilities

Lead the development, governance, and continuous improvement of the enterprise resilience program, including Business Continuity, Crisis Management, Technology Resilience, and Incident Management Governance.
Establish and govern enterprise resilience policies, standards, frameworks, methodologies, and minimum requirements.
Drive the strategic direction, maturity, and continuous improvement of resilience capabilities across the organization.
Align resilience programs with business priorities, regulatory requirements, industry best practices, and emerging risks.
Define and monitor KPIs, KRIs, maturity metrics, and executive reporting to measure resilience performance and risk exposure.
Partner with senior leaders, Enterprise Risk Management, and business stakeholders to strengthen risk management, recovery capabilities, crisis preparedness, and third-party resilience.
Provide enterprise resilience governance oversight, guidance, tools, best practices, training, and cross-functional collaboration across business units and functions.
Partner with the Third-Party Cyber Risk and Supplier Resilience leader to align critical suppliers and external partners with enterprise resilience requirements and governance expectations.
Own the governance framework for Global Security Policies, Standards, and Technical Control Manuals (TCMs), including their development, review, approval, maintenance, communication, and oversight.
Maintain governance processes that keep Global Security policies, standards, and TCMs current, risk-informed, actionable, and aligned with business priorities, regulatory requirements, and industry best practices.
Lead the Global Security documentation governance lifecycle, including periodic reviews, stakeholder engagement, exception management, version control, and executive approvals.
Partner with Security, Cybersecurity, Legal, Compliance, Enterprise Risk Management, Audit, and business stakeholders to ensure governance requirements are understood and implemented.
Define and monitor governance metrics, compliance indicators, and reporting on policy adherence, control effectiveness, exceptions, and remediation needs.
Drive improvements that simplify, strengthen, and mature the security governance framework while balancing enterprise requirements with business enablement.
Integrate resilience requirements and governance expectations into Global Security Policies, Standards, and TCMs where appropriate.