Cyber Risk Program

Overview

Established a board-facing cyber risk program translating technical vulnerabilities into quantified business impacts. Developed a risk reporting framework using FAIR analysis and KRIs/KPIs aligned to enterprise objectives. Delivered quarterly board updates tying security posture to financial exposure, regulatory obligations, and market reputation.

Role

Director of Product Security presenting directly to executive leadership and the Board. Built the framework and reporting cadence, with data pipelines supported by the risk and compliance team.

Impact

Improved Board literacy in cybersecurity, aligning decision-making with enterprise risk appetite. Elevated security to a business enabler rather than a compliance cost.

Technologies, Frameworks, and Artifacts

• FAIR Risk Quantification
• NIST CSF / ISO 27005 alignment
• Executive dashboards (Power BI)
• Key Risk Indicators (KRIs / KPIs)