Vice President, Cyber Threat Center (R-19312)

Dun & Bradstreet•Jacksonville - Florida - United States, FL

2d•Hybrid

About The Position

The Vice President of Cyber Threat Center (CTC) is a senior leader within D&B’s Global Security & Risk team responsible for leading a global, 24x7 capability that protects the enterprise from cyber threats. The Vice President of Cyber Threat Center oversees four integrated pillars, Security Operations & Incident Response (SOC/IR), Detection Engineering & Automation, Threat Intelligence, and Vulnerability & Exposure Management, to drive proactive defense, rapid incident containment, and continuous risk reduction. The VP will set strategy and vision, establish outcome-based metrics (e.g., MTTD/MTTR, exposure reduction, detection coverage), advance automation and engineering rigor, and partner across Technology, Risk, Legal, and the Business to safeguard the organization at scale.

Requirements

12–15+ years of progressive cybersecurity experience with 7+ years leading large, global teams across two or more of: SOC/IR, Detection Engineering/Automation, CTI, and Vulnerability/Exposure Management.
Proven executive leadership in 24x7 operations, major incident command, and cross-functional crisis management.
Demonstrated success building engineering-centric programs (detection-as-code, CI/CD for detections, telemetry pipelines, SOAR automation) and driving measurable outcomes.
Experience operating at enterprise scale (multi-cloud, hybrid, distributed workforce) and in regulated industries.
Hands-on familiarity with modern stacks and patterns (examples): SIEM/XDR: Splunk, Chronicle, Microsoft, CrowdStrike, SentinelOne SOAR/Automation: XSOAR, Tines, Swimlane, custom orchestrations Threat Intel/TIP: Recorded Future, Anomali, MISP Vulnerability/Exposure: Tenable, Qualys, Rapid7, Wiz, ASM/CSPM Cloud & Containers: GCP/AWS/Azure; Kubernetes, GKE/EKS/AKS
Experience with red/purple teaming and detection engineering mapped to MITRE ATT&CK.
Background managing budgets ($MM), vendor ecosystems, and outcomes-based contracts.

Responsibilities

Define and execute the multi‑year Cyber Threat Center strategy and global follow‑the‑sun model, including org design, talent plan, and partner ecosystem.
Oversee monitoring, triage, investigation, and response; act as executive incident commander for material events with strong crisis communications.
Govern a detection-as-code program (CI/CD, testing, version control), map coverage to MITRE ATT&CK, and maintain a detection registry.
Drive SOAR and custom automations for enrichment and response; increase automation coverage and reduce MTTD/MTTR and analyst toil.
Set PIRs, run collection and analysis, deliver actionable intel products, and convert TTPs into detections; collaborate with ISACs and law enforcement.
Lead threat-based VM across infrastructure, cloud/containers/K8s, and SaaS; enforce remediation SLAs and deliver unified exposure views.
Define OKRs/KPIs (e.g., MTTD/MTTR, detection coverage, exposure reduction) and communicate outcomes, risks, and trends to senior leadership and the Board.
Maintain IR plans, playbooks, and crisis processes; run tabletop/purple-team exercises; oversee DFIR, malware analysis, and evidence handling.
Influence roadmaps (zero trust, logging/telemetry standards) and align controls with frameworks/regulations (NIST/ISO/PCI/GDPR, etc.). Understand risks to AI and the detection and response lifecycle related to AI threats.
Rationalize tooling for capability and cost efficiency; manage contracts, outcomes-based engagements, third-party integration, and M&A onboarding.
Recruit, develop, and mentor global leaders; drive efficiency, continuous learning, and clear planning.