You will be taken to Kroll’s own careers page to apply. Job ID 21015184.
Job description
Senior Manager - Cyber Security Strategy, Governance & Managed Security Services is responsible for leading enterprise cyber security strategy, governance, risk management, compliance, data protection, and security operations initiatives. This role provides leadership across consulting engagements, managed security services, risk management programs, and cyber transformation initiatives while helping build and scale offshore managed security capabilities. The individual will partner with executive stakeholders to strengthen cyber resilience, define security roadmaps, establish governance frameworks, and deliver high-quality cyber security services across global clients and enterprise environments. Day to Day Responsibilities Cyber Security Strategy & Governance
Develop and execute enterprise cyber security strategies aligned with business objectives and regulatory requirements
Establish and mature cyber security governance frameworks, policies, standards, and operating models
Define security roadmaps, transformation programs, and strategic initiatives to improve organizational security posture
Engage with executive leadership and business stakeholders to drive cyber risk-informed decision making
Develop cyber security metrics, KPIs, KRIs, and executive reporting frameworks
Lead enterprise risk management programs and cyber governance initiatives
Oversee implementation and maintenance of security control frameworks and compliance programs
Conduct cyber risk assessments and facilitate risk treatment and remediation activities
Ensure adherence to industry standards, regulatory requirements, and security frameworks
Provide governance oversight for audits, regulatory reviews, and compliance assessments
Lead Risk and Control Self-Assessment (RCSA) programs across business and technology functions
Establish risk identification, analysis, quantification, and reporting methodologies
Develop cyber risk registers and oversee remediation tracking activities
Facilitate risk workshops and control assessment exercises with stakeholders
Provide strategic recommendations for risk mitigation and control optimization
Define and implement enterprise data governance and data protection strategies
Establish data classification, retention, handling, and protection standards
Lead Data Loss Prevention (DLP) programs across endpoints, cloud platforms, email, and enterprise applications
Collaborate with legal, compliance, privacy, and business teams to strengthen data security controls
Ensure data governance programs align with regulatory and organizational requirements
Provide strategic oversight for enterprise security architecture initiatives
Review and approve security architecture designs for critical business projects and technology platforms
Lead threat modeling exercises for applications, cloud environments, and enterprise infrastructure
Ensure security-by-design principles are incorporated into technology initiatives
Establish security architecture standards and design review processes
Provide leadership and governance over incident response and cyber crisis management programs
Guide investigation and response efforts during major cyber security incidents
Support development and testing of incident response plans, playbooks, and recovery procedures
Drive lessons learned activities and continuous improvement initiatives following security incidents
Coordinate with SOC, IR, legal, compliance, and business stakeholders during cyber events
Help define, build, and scale offshore managed security service capabilities and operating models
Develop service offerings, delivery frameworks, governance processes, and operational standards
Establish service delivery KPIs, staffing models, and resource planning frameworks
Support business development, solutioning, transition, and service transformation activities
Drive operational excellence, client satisfaction, and service maturity across managed security programs
Lead and mentor high-performing cyber security teams across multiple security domains
