Drives cybersecurity initiatives across Security Operations Center and Incident Response teams, tracking technical execution through completion. Identifies and mitigates risks, blockers, and dependencies; maintains the threat response roadmap; coordinates people, processes, and technologies; and communicates progress with IT and business stakeholders. The role supports security strategy, automation, incident escalation, detection engineering, and remediation efforts.

Leads SOC and incident response process improvement, automation, analytics, and responsible AI adoption. Designs and documents threat response workflows, builds SOAR and AI integrations, governs use cases, develops reporting, and trains teams. Partners cross-functionally to deliver cybersecurity initiatives, improve response speed, reduce manual effort, and strengthen threat response capabilities.

Designs and governs enterprise identity and access management architecture across hybrid environments. Responsibilities include single sign-on, federation, identity lifecycle, provisioning, entitlements, access packages, directory services, least-privilege controls, and Zero Trust security. The role analyzes requirements, evaluates emerging and AI-enabled technologies, develops roadmaps, prototypes solutions, and collaborates with leadership and technical stakeholders to implement secure, scalable architectures.