The Associate Director, Information Security Strategy & Analytics is a senior people leader who partners with the ISRM leadership team and CISO to define and document the function's strategic direction while leading the team responsible for security reporting and analytics. This role translates business priorities, risk insights, and hard security data into insights that drive strategic decisions, while owning the platforms and reporting capabilities that make those strategies measurable. 

This role has three defining requirements: seasoned security practitioner depth, the ability to communicate strategy and data clearly and credibly to executive audiences, and a proven track record leading technical or analytical teams. 

Responsibilities

• Lead the metrics and reporting team, including hiring, performance management, talent development, and defining the team's portfolio, processes, and ways of working. 
• Partner with security domain leaders to develop impactful cross-functional reporting that gives leadership clear insight into security posture, operational health, and program value. 
• Collaborate with ISRM leadership and portfolio management to define ISRM's strategic direction, including strategic priorities, target state, and multi-year roadmap, grounded in threat and risk insights, key metrics, business priorities, and delivery realities. 
• Own ISRM's strategic narrative by developing and maintaining strategy documentation, executive communications, and leadership presentations that clearly articulate direction and value to stakeholders and partners. 
• Lead the process of translating ISRM's strategic priorities into annual planning inputs, including LRP and capital planning submissions, ensuring investment rationale is clearly tied to execution roadmaps. 
• Own and mature ISRM's data lake and reporting platforms, ensuring they deliver consistent, accurate, and timely data to support leadership decision-making. 
• Own and mature the semi-annual cyber business review process, delivering periodic cybersecurity performance reporting to business executives. 
• Track ISRM's security maturity progress against frameworks such as NIST CSF, ensuring assessment results are reflected in strategic priorities, roadmap inputs, and remediation planning.