responsible for leading the assessment, governance, and continuous improvement of cyber risk across WBD’s global technology environment
drives a risk-based, data-driven approach to identifying, quantifying, prioritizing, and mitigating risk across cloud, application, infrastructure, and production systems
owning and evolving the global cybersecurity risk exception process
defining governance, evaluating compensating controls, and ensuring consistent risk-based decision-making across the enterprise
partnering closely with Product Owners, Business Control Owners, Technology Operations, DTC, and Engineering teams to embed risk management into the SDLC and operational processes
leveraging deep technical expertise in cloud architectures, vulnerability management, and control evaluation
engaging with modern security tooling and architecture, enabling the translation of complex technical risk into actionable business insights and measurable risk reduction outcomes

10+ years of experience in cybersecurity risk, compliance, or related technical domains
Deep expertise in cyber risk frameworks (NIST, ISO, PCI, SOX)
Vulnerability management and risk prioritization
Cloud security (AWS, Azure, GCP) and modern application architectures
Security control design and compensation control strategies
Strong technical understanding of cloud IAM, network security, and workload protection
Secure SDLC, CI/CD pipelines, and system integrations
Complex distributed systems and enterprise environments
Experience with GRC and security tooling (ServiceNow IRM, Tenable, Wiz, Brinqa, Power BI)
Proven ability to assess complex technical environments and translate risk into business impact
Strong communication skills, with the ability to influence senior stakeholders and translate technical concepts into business language
Advanced analytical, problem-solving, and program management capabilities
Ability to manage multiple priorities in dynamic, fast-paced environments
Strong attention to detail, organizational skills, and commitment to high-quality deliverables
Bachelor’s degree in Computer Science, Engineering, IT, or related field
Relevant certifications (CISSP, CISM, CRISC, CISA) preferred

Senior Staff, Cybersecurity Risk Management

Key skills