Cybersecurity Program Director
Lead a high-priority cybersecurity transformation program for a major player in its sector, shaping security architecture and vendor strategy at scale. You will orchestrate complex initiatives from needs definition to compliance and integration.
CONTEXT
Our client, a major player in its sector, is launching a strategic cybersecurity transformation across a complex, distributed environment. Years of growth, acquisitions, and digital acceleration have created a patchwork of security tools, processes, and responsibilities. The board has approved a multi-year program to protect critical assets, satisfy regulators, and build a resilient security posture. The program spans cloud security, network protection, threat detection, incident response, and disaster recovery.
ACTIVITIES
- Define security needs and target architecture with business and IT stakeholders.
- Analyze market solutions and establish specifications for major security workstreams.
- Manage tender phases, vendor evaluation, and procurement recommendations.
- Assess technical, operational, and compliance risks across initiatives.
- Oversee prototypes, proofs of concept, and integration activities.
- Coordinate workstreams such as secure web gateways, SOC operations, network security, WAF, DDoS protection, CMDB, and disaster recovery.
- Ensure solutions meet regulatory requirements and integrate with existing platforms.
- Report progress, risks, and dependencies to executive steering committees.
EXPECTED ACHIEVEMENTS
- A coherent cybersecurity target architecture and multi-year roadmap.
- Successful delivery of strategic security initiatives within scope, budget, and timeline.
- Improved detection, response, and recovery capabilities.
- Strong vendor partnerships and clear contractual protections.
- Enhanced compliance posture and reduced exposure to cyber threats.
ENVIRONMENT
- Security domains: Zscaler, SOC, Network Security, WAF, DDoS, CMDB, Disaster Recovery.
- Methodologies: program management, risk management, architecture frameworks, Agile and stage-gate delivery.
- Tools: GRC platforms, SIEM, vulnerability management, cloud security consoles, procurement suites.
- Stakeholders: CISO, CIO, infrastructure teams, external vendors, auditors, and business leaders.