Cybersecurity Customer Assurance Lead

• Defining and implementing the strategy, operating model, governance, and service approach for the Customer Trust Office.
• Building and maturing a scalable global customer assurance capability.
• Acting as a senior cybersecurity adviser to Sales, account teams, business leaders, and other internal stakeholders during customer opportunities and assurance engagements.
• Representing the cybersecurity organization in external customer meetings, security reviews, audits, and executive-level discussions.
• Leading complex or strategically important customer assurance engagements that require tailored analysis, cross-functional coordination, or senior-level judgement.
• Communicating the organization’s cybersecurity posture, risk-management practices, and control environment clearly and credibly to technical and non-technical audiences.
• Assessing complex customer questions and determining an appropriate response strategy in partnership with Cybersecurity, Privacy, Legal, Compliance, Product Security, Engineering, and business stakeholders.
• Establishing scalable approaches for responding to customer security questionnaires, due-diligence assessments, audit requests, and related assurance activities.
• Defining governance and approval mechanisms for customer-facing cybersecurity information so that responses are accurate, consistent, current, and appropriately supported.
• Building an authoritative knowledge capability that brings together approved responses, supporting evidence, audit artefacts, and reusable customer trust materials.
• Developing productive partnerships with cybersecurity and business subject-matter experts to create, validate, and improve authoritative content.
• Identifying recurring sources of customer concern and using those insights to improve content, processes, controls, and the broader customer trust strategy.
• Designing approaches that reduce duplication and improve quality through standardization, workflow automation, AI-assisted processes, and knowledge-management capabilities.
• Defining meaningful measures of programm effectiveness, customer experience, quality, demand, efficiency, business impact, and capability maturity.
• Developing standards and guidance for customer-facing cybersecurity communications.
• Providing expertise, guidance, and mentorship to colleagues contributing to customer trust and assurance activities.
• Monitoring relevant cybersecurity, assurance, privacy, audit, regulatory, and customer developments and evaluating their implications for customer engagements.

• Establish credibility as a trusted cybersecurity adviser to Sales, account teams, Cybersecurity leadership, and other internal partners.
• Represent the organization confidently and independently in strategic customer assurance discussions.
• Launch and operationalize the Customer Trust Office with a clear remit, operating model, governance structure, and engagement approach.
• Establish a consistent and trusted approach to communicating with customers about cybersecurity.
• Create a scalable source of approved responses, supporting evidence, audit artefacts, and customer trust resources.
• Improve the quality, consistency, and timeliness of customer assurance engagements.
• Build repeatable approaches that reduce duplication while providing appropriate flexibility for complex or strategically important customers.
• Introduce practical workflow automation, AI-assisted processes, and improved knowledge-management capabilities.
• Establish meaningful reporting that supports prioritization, accountability, business decisions, and continuous improvement.
• Build sustainable capabilities that can meet growing customer demand without depending on the knowledge or involvement of a single person.

• Typically, 8 to 10 years of relevant experience in cybersecurity assurance, customer assurance, cybersecurity risk management, IT audit, security governance, compliance, or a related discipline.

• Typically, 8 to 10 years of relevant experience in cybersecurity assurance, customer assurance, cybersecurity risk management, IT audit, security governance, compliance, or a related discipline.
• Significant experience leading or directly supporting external customer cybersecurity discussions, assurance reviews, audits, due-diligence activities, or executive briefings.
• Broad working knowledge across cybersecurity domains, including the relationships between security strategy, governance, risk, controls, technology, and operations.
• Experience communicating with customer security teams, auditors, risk and compliance professionals, procurement teams, sales organizations, and senior business stakeholders.
• Demonstrated ability to translate complex cybersecurity matters into clear, accurate, and audience-appropriate communications.
• Experience exercising independent judgement on complex issues and bringing together multiple perspectives to determine an appropriate course of action.
• Demonstrated ability to influence across organizational boundaries without relying on direct authority.
• Experience building, transforming, or materially improving an assurance, trust, governance, audit, risk, or compliance capability.
• Strong written, verbal, presentation, facilitation, and relationship-management skills.
• Ability to manage competing priorities while maintaining sound judgement, attention to detail, and accountability for outcomes.
• Ability to identify opportunities for standardization and automation without losing the judgement needed for complex customer engagements.
• Interest in applying AI-assisted workflows, automation, and knowledge-management capabilities to improve quality, scalability, and organizational effectiveness.
• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Business, Audit, or a related field, or equivalent professional experience.

• Certified Information Systems Security Professional (CISSP)

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Cloud Security Professional (CCSP)
• ISO/IEC 27001 Lead Implementer or Lead Auditor

• Representing a cybersecurity, assurance, trust, risk, or compliance organization in strategic customer meetings.
• Supporting major technology, cloud, managed-services, enterprise software, infrastructure, AI, or cybersecurity customers.
• Developing or transforming customer assurance, customer trust, governance, audit, risk, or compliance programm's.
• Working with cybersecurity and assurance frameworks and standards such as ISO/IEC 27001, the NIST Cybersecurity Framework, SOC reporting, PCI DSS, or comparable frameworks.
• Understanding how cybersecurity regulatory requirements and customer expectations vary across industries and regions.
• Designing governance frameworks, approval models, knowledge repositories, trust centers, and reusable assurance content.
• Selecting, implementing, or improving GRC, workflow, automation, trust-portal, or knowledge-management solutions.
• Using customer insights and recurring assurance themes to influence process, programm, or control improvements.
• Coaching or mentoring colleagues and developing customer-facing cybersecurity capability across teams.