Director, Information Security Engineering - ITC

This role provides strategic and day-to-day leadership for Cyber Data and Secure Code Engineering, maintaining operational stability, improving efficiency and reducing risk while supporting a global security capability. It leads a cross-functional team of Cyber Data and Secure Code Engineers and aligns local execution with global security priorities. The role partners with the Cyber Defence Centre, Data Protection, Windows Client/Server Platform, Cloud Security and Automation teams, and stakeholders ranging from service desk technicians to architects, developers and legal partners.

• Provide strategic and day-to-day leadership for Cyber Data and Secure Code Engineering, maintaining operational stability, improving efficiency and reducing risk.
• Align local execution with global security priorities and strengthen security technology management.
• Lead, coach and develop Cyber Data and Secure Code Engineers, setting clear goals and reviewing results to keep the team aligned with planned outcomes.
• Partner with global management and cross-functional security, platform, cloud, development and legal stakeholders to deliver coordinated security capabilities.
• Assess and optimise operational tasks, functions and processes, and drive improvements designed to prevent incidents before they occur.
• Develop and execute strategic vision, roadmaps, budgets and maturity plans for security technology management.
• Translate business trends, strategies and information security imperatives into technical services and solutions.
• Guide capabilities and toolsets spanning endpoint protection, secure software development, SAST, DAST, vulnerability scanning, Databricks, network visibility and advanced threat protection.
• Identify, track and experiment with new or potentially disruptive technologies while maintaining alignment with business strategy and direction.
• Turn technical and business needs into durable services and solutions.

• Bachelor's degree in Information Technology, Information Security, Computer Science, Engineering or a related field, or an equivalent combination of education, experience or training.
• Expert knowledge of data and analytics tools and best practices, endpoint security and cloud security controls, and the ability to identify tactical and strategic solutions.
• Strong written and verbal communication skills, including the ability to explain complex issues in nontechnical terms and influence senior stakeholders.
• Demonstrated ability to develop and execute vision, mission, roadmaps and budgets while building and developing high-performing teams.
• Strategic, hands-on security engineering leadership, with the ability to guide a diverse team while improving operational stability, efficiency and risk reduction across a large technical environment.
• Deep knowledge of network, endpoint and cloud security controls, with the judgment to balance tactical needs with long-term priorities.
• Ability to communicate clearly with technical and nontechnical stakeholders, manage sensitive information with sound ethics, and make responsible business decisions.
• Ability to translate business trends and security imperatives into practical services, roadmaps and investments.
• Ability to build and motivate high-performing teams, provide clear direction, review results and adjust plans to achieve outcomes.
• Comfortable with change and ambiguity, values progress over perfection, and brings an entrepreneurial, customer-focused mindset to stakeholder relationships.

• 15+ years of relevant experience, including leadership of security engineering or comparable technical teams.