Head of Cyber Customer Trust & Assurance

JLL•Houston, TX

4d•Onsite

About The Position

JLL is seeking a Head of Cyber Customer Trust & Assurance to report to the Chief Information Security Officer (CISO) and support the leadership of our global cybersecurity strategy and operations. This senior executive position will partner directly with the CISO to drive enterprise-wide security transformation across JLL's global operations, managing complex cybersecurity risks while ensuring the protection of our technology infrastructure, information systems, and client data. You'll work closely with the CISO to establish strategic direction for our cybersecurity organization, lead large diverse teams across multiple regions, heavily assist with client relationships, and serve as a key advisor to executive leadership on critical security matters impacting the entire organization.

Requirements

Master's degree in Cybersecurity, Information Technology, Computer Science, or related discipline.
15+ years of progressive cybersecurity experience with minimum 8-10 years in senior executive leadership positions managing enterprise-wide security organizations for large multinational corporations
Significant experience in cybersecurity field and extensive management experience leading complex security functions with responsibility for enterprise-wide security strategies and substantial financial accountability
Proven track record of developing and implementing long-term cybersecurity strategies for entire business segments with authority to make significant exceptions to policy and procedures under enterprise guidelines
Extensive experience managing significant financial and external cybersecurity risks requiring frequent interaction with executive leadership, board members, and regulatory authorities
Advanced expertise in enterprise security architecture, risk management frameworks, threat intelligence, and regulatory compliance across multiple international jurisdictions
Demonstrated experience making strategic vendor selections and purchasing decisions for enterprise security technologies, managing substantial cybersecurity budgets with P&L responsibility
Strong background in developing, modifying, and executing enterprise-wide security policies that significantly impact organizational security posture and business operations
Exceptional leadership, strategic thinking, and communication capabilities with proven ability to influence organizational change at the enterprise level and maintain relationships with executive leadership and external stakeholders’ objectives.
Candidates must be authorized to work in the United States without sponsorship.

Nice To Haves

Advanced degree or MBA preferred.
Industry certifications desired but not required: CISSP, CISM, CRISC, or equivalent executive-level security credentials.
Additional board-level or executive certifications preferred.
Experience in Commercial Real Estate technology environments, Financial Services, professional services and client-facing security advisory roles highly preferred.

Responsibilities

Build and Lead a Global Team: Recruit, mentor, and develop a high-performing team of Business Information Security Officers (BISOs) and supporting Cybersecurity client support staff. Provide strategic direction and ensure the team is aligned with both the CISO’s vision and the specific needs of the business units they support.
Manage Global Customer Audits: Act as the central point of accountability for all customer-driven and third-party security audits (e.g., SOC2, ISO 27001, industry-specific certifications). You will manage the end-to-end process, from scoping and evidence gathering to managing findings and remediation plans.
Foster Business Integration: Embed your BISOs as trusted security advisors within each major business unit. Ensure cybersecurity is integrated into the product lifecycle, sales process, contract execution and customer relationship management.
Customer Engagement: Personally engage with strategic and high-value clients during the pre and post sales cycle and as an ongoing trusted advisor to address their most complex security and compliance concerns.
Voice of the Customer: Gather and synthesize customer feedback regarding their security, privacy, and compliance requirements. Advocate for these needs within the CISO organization and key business segments to influence the security roadmap and product feature prioritization.
Manage Security Commitments: Work with the Legal and Procurement teams to review and negotiate data protection and security addendums (DPAs) in customer and vendor contracts. Ensure the business fully understands and can meet the security commitments made.
Navigate Global Regulations: Maintain a deep and current understanding of global data privacy and security regulations (e.g., GDPR, CCPA, HIPAA) and their impact on our customers’ requirements. Ensure our assurance program effectively demonstrates compliance with these standards.
Incident Response: When required, acts as a senior cybersecurity leader during critical situations, ensuring continuity of cybersecurity leadership and decision-making authority across business lines. In addition to managing communication to key JLL customers and clients.
Partners with senior cybersecurity leadership to manage significant and complex financial and external cybersecurity risks, working closely with executive leadership of strategic organizational importance.
Establishes strategic direction and annual priorities for large, diverse cybersecurity teams spanning multiple locations and countries, primarily providing leadership through subordinate senior managers.
Drives innovation in cybersecurity practices by identifying and implementing cutting-edge security technologies when applicable, developing precedent-setting security solutions to maintain our board stated risk appetite.
Provides executive-level strategic guidance to senior leadership on complex security matters, conducting and participating in enterprise risk assessments and advising on business decisions with significant security implications.
Establishes and maintains relationships with industry security leaders, regulatory bodies, and external security organizations to advance JLL's security posture and industry reputation.
Resolve highly complex, often unprecedented problems Cybersecurity challenges arising conflicting priorities and shifting geopolitical regulations to support JLLs core business strategy, impacting the broader business segments and revenue streams.
Apply in-depth business knowledge and use abstract, conceptual analysis to develop innovative risk reducing solutions to win and maintain existing customers and clients.
Manages activities of large, diverse cybersecurity teams within the global organization, establishing strategic direction through subordinate senior managers both reporting into this role, and indirect reporting relationships due to the shared responsibility of securing JLLs large technology portfolio.
Assists with the long-term strategy for the entire cybersecurity function and drives innovation and improvement initiatives with high financial impact for business segments.