Cybersecurity Customer Assurance Lead

Description

The role is hybrid and sits in the Information Technology function at Expert level.

The company is a global business that helps customers connect, protect, analyze and act on data and applications across edge and cloud.

The Cybersecurity team protects the company while supporting innovation, growth and customer confidence.

You will join the Cybersecurity Centre of Excellence, which is setting up a Customer Trust Office to give customers consistent, accurate and open information about the security program.

You will build this capability and speak for the security organization in internal and external customer engagements.

Responsibilities

• Set the strategy, operating model, governance and service approach for the Customer Trust Office.
• Build and grow a scalable assurance capability that serves customers worldwide.
• Advise Sales, account teams, business leaders and other internal stakeholders as a senior cybersecurity adviser on customer opportunities and assurance work.
• Represent cybersecurity in customer meetings, security reviews, audits and executive discussions.
• Lead complex or high-priority customer assurance work that needs tailored analysis, cross-team coordination or senior judgement.
• Explain the organization's security posture, risk management and control environment clearly to technical and non-technical audiences.
• Decide how to answer difficult customer questions with Cybersecurity, Privacy, Legal, Compliance, Product Security, Engineering and business teams.
• Create scalable ways to handle security questionnaires, due-diligence reviews, audit requests and similar assurance activity.
• Set governance and approval steps for customer-facing security information so it stays accurate, consistent, current and well supported.
• Build a trusted knowledge base of approved answers, evidence, audit artifacts and reusable trust materials.
• Work with cybersecurity and business experts to write, check and improve authoritative content.
• Spot recurring customer concerns and use them to improve content, processes, controls and the trust strategy.
• Cut duplicated work through standards, workflow automation, AI-assisted processes and knowledge management.
• Define useful measures of program effectiveness, customer experience, quality, demand, efficiency, business impact and maturity.
• Write standards and guidance for customer-facing security communications.
• Guide and mentor colleagues who contribute to customer trust and assurance.
• Track cybersecurity, assurance, privacy, audit, regulatory and customer developments and assess what they mean for customer engagements.
• In your first 12 months, establish yourself as a trusted cybersecurity adviser to Sales, account teams, Cybersecurity leadership and other internal partners.
• In your first 12 months, represent the organization confidently and independently in strategic customer assurance discussions.
• In your first 12 months, launch the Customer Trust Office with a clear remit, operating model, governance structure and engagement approach.
• In your first 12 months, set a consistent and trusted way of communicating with customers about security.
• In your first 12 months, build a scalable source of approved answers, evidence, audit artifacts and trust resources.
• In your first 12 months, raise the quality, consistency and speed of customer assurance work.
• In your first 12 months, create repeatable approaches that reduce duplication while allowing flexibility for complex or strategic customers.
• In your first 12 months, introduce practical automation, AI-assisted processes and better knowledge management.
• In your first 12 months, set up reporting that supports prioritization, accountability, business decisions and continuous improvement.
• In your first 12 months, build capabilities that meet growing demand without relying on any single person.

Requirements

• Broad cybersecurity expertise paired with strong customer-facing communication and relationship skills.
• Confidence engaging customer security leaders, auditors, sales teams, executives, procurement and technical specialists. You find the concern behind a question and turn complex topics into clear business language.
• Comfortable owning high-profile discussions and using sound judgement when information is incomplete or priorities conflict. You weigh customer needs against security, legal, privacy, regulatory and business factors.
• Motivated by building capabilities that do not yet exist, clarifying unclear problems and designing approaches that scale past one engagement. You find recurring gaps, fix the system and measure impact by the lasting capabilities you build.
• Typically 8 to 10 years of relevant experience in cybersecurity assurance, customer assurance, cyber risk, IT audit, security governance, compliance or a related discipline.
• Significant experience leading or supporting external customer security discussions, assurance reviews, audits, due-diligence work or executive briefings.
• Solid working knowledge across cybersecurity domains, including how strategy, governance, risk, controls, technology and operations connect.
• Experience communicating with customer security teams, auditors, risk and compliance staff, procurement, sales and senior business leaders.
• Proven ability to turn complex security matters into clear, accurate messages for each audience.
• Experience using independent judgement on complex issues and combining several viewpoints to choose a course of action.
• Proven ability to influence across organizational boundaries without direct authority.
• Experience building, transforming or materially improving an assurance, trust, governance, audit, risk or compliance capability.
• Strong written, verbal, presentation, facilitation and relationship-management skills.
• Ability to manage competing priorities while keeping judgement, attention to detail and accountability for outcomes.
• Ability to spot chances to standardize and automate without losing the judgement complex engagements require.
• Interest in AI-assisted workflows, automation and knowledge management to improve quality, scale and effectiveness.
• A bachelor's degree in cybersecurity, information technology, risk management, business, audit or a related field, or equivalent professional experience.
• Expert-level profile: advanced subject knowledge, complex problem-solving, significant independent judgement, external customer representation, cross-functional leadership, process improvement and mentoring.
• Desired certifications, strongly desired: one or more of CISSP, CISA, CISM, CRISC, CCSP, or ISO/IEC 27001 Lead Implementer or Lead Auditor, or an equivalent relevant credential. These strengthen an application but do not replace customer-facing expertise, judgement and experience building scalable assurance.
• Valuable: representing a cybersecurity, assurance, trust, risk or compliance group in strategic customer meetings.
• Valuable: supporting major technology, cloud, managed-services, enterprise software, infrastructure, AI or cybersecurity customers.
• Valuable: developing or transforming customer assurance, customer trust, governance, audit, risk or compliance programs.
• Valuable: working with frameworks and standards such as ISO/IEC 27001, the NIST Cybersecurity Framework, SOC reporting, PCI DSS or comparable ones.
• Valuable: understanding how cybersecurity regulatory requirements and customer expectations differ by industry and region.
• Valuable: designing governance frameworks, approval models, knowledge repositories, trust centers and reusable assurance content.
• Valuable: selecting, implementing or improving GRC, workflow, automation, trust-portal or knowledge-management tools.
• Valuable: using customer insights and recurring assurance themes to shape process, program or control improvements.
• Valuable: coaching or mentoring colleagues and building customer-facing cybersecurity skills across teams.

Conditions

Hybrid working, with an average of 2 days per week in a company office.

Annual base salary of USD 109,000 to 251,000 in Texas, United States. Actual offers depend on location, experience, education, training and skill level, and variable incentives may also be offered.

The company is an equal opportunity employer that decides on qualifications, merit and business need, and it follows laws on criminal records.

Benefits

• Health and wellbeing benefits covering physical, financial and emotional health.
• Career development programs, from becoming a knowledge expert in your field to moving into another division.
• Flexibility to manage work and personal needs.
• US benefit details are published on the company's benefits enrollment site.