Head of Strategy for the Protect Pillar
About The Position
At BBH, Partnership is more than a form of ownership-it's our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We take that responsibility seriously. With a 200-year legacy and a shared passion for what's next, this is the right place to build a fulfilling career. Position Summary: The Head of Strategy for the Protect Pillar will serve as a strategic thought leader responsible for shaping the Protect Pillar's approach to implement least privilege principles, enhance insider threat defenses and evaluate emerging technologies. This role requires strategic foresight, deep technical understanding and collaboration with key stakeholders. This role reports to the Head of the Protect Pillar in Systems. The Protect Pillar is a unique BBH-construct designed for clear, centralized and coordinated accountability: to protect against physical and logical security risks; to safeguard stakeholder assets; and to detect, prepare for, and respond effectively to security events. To that end, the Protect Pillar encompasses the following areas: Cybersecurity; Enterprise Data Protection and Data Governance; Information Security Management ("ISM"); Business Continuity / Disaster Recovery; Enterprise Incident Management; and Global Security
Requirements
- Minimum 10 years of experience in cybersecurity, access control / least privilege design and IAM modernization, and insider threat program
- Experience in a strategy role in financial services
- Experience with Sailpoint, OIS, mainframe system, mainframe security program (IBM's Resource Access Control Facility (RACF))
- Experience with robotic process automation (RPA), machine learning models, familiarity with MS generative AI products (e.g., MS365 Co-Pilot, GitHub, Azure AI), and agentic AI frameworks
- Excellent analytical and communication skills
- Strong PowerPoint and Excel skills
Responsibilities
- Access Control and Least Privilege Strategy: Lead assessment of identity and access management protocols to identify opportunities to reduce broad entitlements and implement least privilege principles across systems, applications and data
- Insider Threat Program: Evaluate and strengthen controls designed to detect and prevent insider threat
- Evaluate new technology: Evaluate potential risks and mitigants associated with emerging AI technology from an access control, cyber security and data security perspective
- Partner with stakeholders across the Protect Pillar, Systems, the business, Risk, OGC and Compliance to ensure implementation of enhancements
- Service as a strategic advisor to the Head of the Protect Pillar on areas as needed
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Industry
Securities, Commodity Contracts, and Other Financial Investments and Related Activities
Education Level
No Education Listed
Number of Employees
11-50 employees
