Director, Cybersecurity Risk Management

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

The Director, Cybersecurity Risk Management, will lead a multifunctional cybersecurity risk management team.  This organization will encompass cybersecurity supply chain risk management (C-SCRM), mergers and acquisitions cybersecurity risk, enterprise cybersecurity risk management, and the Business Information Security Officer program.  They will be responsible for building relationships, influencing and negotiating with Kyndryl leadership across multiple functions and geographies.  This role will establish strategic plans for their service areas based on CIO/CISO strategy, lead operational execution and make decisions with both short and long term impacts to Kyndryl. 

Ideal candidates will have a combination of technical experience including making architectural/control application decisions and overseeing the governing of systems along with general business/P&L background.  The proven ability to trade technical cybersecurity decisions with business impact while balancing overall risk management is critical.

Essential Responsibilities:

• Lead and manage a team of cybersecurity risk management professionals delivering a comprehensive risk management capability.

• Make risk balanced decisions that can affect the confidentiality or integrity of Kyndryl IT systems consistent with level and delegated authority.

• Shape the strategic direction of cybersecurity risk management services to align with Kyndryl’s mission, ensuring cohesive and impactful outcomes.

• Build effective relationships with Kyndryl leaders, vertically within assigned area of operations, and horizontally cross CISO/CIO partner organizations.  These relationships should be nurtured through time to build trust and foster long-term collaboration.

• Drive large-scale transformation initiatives that modernize and operationalize capabilities in the specific service areas.

• Ensure operational excellence with impact at Kyndryl by implementing consistent best practices in service delivery, security, and communications.

Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies.  Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.

Who You Are

• Expert level knowledge in cybersecurity controls, compliance oversight requirements and risk management techniques.

• Experienced with a variety of cybersecurity control and risk frameworks, governance methodologies to include NIST RMF, NIST CSF 2.0, NIST 800-171 and 800-53 controls, ISO27001, ISO27002.

• Experienced with industry standard third party certifications including ISO 27001, ISO 27002, SOC1, and SOC2 reports.

• Experience with securing multiple delivery models including on-prem and cloud to include IaaS, PaaS, and SaaS.

• Experience using sound business practices and knowledge of business models to quickly understand and resolve business situations by gathering critical information, focusing on key objectives, selecting and implementing the appropriate course of action, and making necessary adjustments to ensure progress.

• Experience identifying elements of risk across a variety of technologies, delivery modalities

Experience:

• 15+ years experience in progressively more senior business or technical leadership roles.

• Demonstrated leadership of risk management programs.

• Dedication to continuous learning through a combination of self-directed, certification, military, and formal education sources

Preferred Qualifications:

• Ability to present effectively across a variety of mediums including written, visual and verbal

• Strong interpersonal and