Senior Assistant Vice President

Cyber Security PMO Responsibilities: Establish and manage the Cyber Security PMO function, including defining project management methodologies, templates, and tools. Lead and manage complex security projects from initiation to closure, ensuring on-time, within-budget, and high-quality delivery. Develop project plans, timelines, and resource allocation strategies. Track project progress, identify and manage risks and issues, and provide regular status updates to stakeholders. Facilitate cross-functional collaboration and communication across security, engineering, and other business units. Manage project budgets and vendor relationships as required. Contribute to the development and tracking of the overall Cyber Security roadmap and strategic initiatives. Cloud Security Architecture & Strategy: Develop and maintain the EXLs cloud security architecture framework, ensuring alignment with business objectives and industry best practices (eg, NIST CSF, ISO 27001). Design and implement secure cloud infrastructure and deployment patterns across various cloud platforms (eg, AWS, Azure, GCP). Define security requirements for cloud-native applications, microservices, and containerized environments (eg, Docker, Kubernetes). Evaluate and recommend security technologies and solutions relevant to our cloud-native environment. Conduct security architecture reviews of existing and proposed systems and provide actionable recommendations. Stay abreast of emerging cloud security threats, vulnerabilities, and best practices. Operational Leadership & Management: Lead and manage key operational security processes and technologies (eg, vulnerability management, incident response, security monitoring). Define and track key security metrics and KPIs to measure the effectiveness of security controls and operational processes. Develop and maintain security policies, standards, and procedures. Collaborate with engineering and operations teams to ensure security is integrated throughout the software development lifecycle (SDLC) and deployment pipelines (DevSecOps). Provide technical guidance and mentorship to other members of the security team.