Works with management and stakeholders to align cybersecurity priorities and goals using technical expertise in security, cloud technologies, risk management, compliance, and related technical domains. Establishes scope and milestones for each aspect of a security program, aligning to broader program plans, Oracle security strategies, and business goals. Manages security programs and complex, cross-organizational initiatives impacting products, services, operations, and business outcomes. Manages highly complex security issues, bottlenecks, dependencies, and risks, escalating when appropriate. Leads security program improvement initiatives, implementing best practices and AI-enabled capabilities to improve operational execution, visibility, reporting, forecasting, and risk management. Facilitates collaboration across multiple teams, driving security discussions that align priorities and program goals. Provides security expertise, technical direction, and mentorship to cross-functional teams. Creates and automates reporting, partnering with engineering teams to improve dashboards, metrics, forecasts, and models that support execution of cybersecurity programs. Acts as a security liaison across stakeholder teams, driving effective collaboration to support Oracle security commitments and customer trust.
Internal Responsibilities
Technical Management and Execution - Security Management
- Leverages cybersecurity knowledge to identify risks, manage scope, estimate timelines, assess feasibility, identify testing requirements, and determine appropriate resources.
- Ensures product and service delivery meets security, privacy, compliance, third-party, export, and accessibility requirements.
- Drives rapid response to security escalations, coordinating across teams and communicating with leadership to assess risk, determine mitigation strategies, and align execution.
Forecasts program demands and resourcing requirements to identify risks and ensure achievable outcomes. - Leads implementation of evolving security processes to ensure organizational objectives and service commitments are met.
- Identifies opportunities to leverage AI-enabled capabilities to improve security operations, program execution, workflow automation, and reporting efficiency.
Technical Management and Execution - Security Strategy and Execution
- Utilizes security knowledge to identify, track, and manage program dependencies and risks.
- Supports incident response, vulnerability management, compliance initiatives, and security improvement programs.
- Supports planning by identifying dependencies, execution risks, and operational constraints.
- Develops delivery standards and guidelines aligned with Oracle security best practices.
- Identifies and quantifies opportunities for AI-enabled automation and operational efficiency improvements.
- Contributes to incident management efforts and identifies opportunities to improve security processes.
Program Oversight - Strategy and Decision Making
- Aligns security priorities with customers, service teams, and stakeholders through regular reporting and communication.
- Establishes scope and milestones for security programs aligned with Oracle security objectives and business goals.
- Assists in defining KPIs and measurement methods for security program performance.
- Builds, maintains, and executes communication strategies that support informed decision making and stakeholder alignment.
Program Oversight - Program and Operations Management
- Manages technical and non-technical cybersecurity programs impacting products and business operations.
- Guides program teams while providing security expertise and support in removing barriers and resolving issues.
- Maintains comprehensive program documentation including plans, status reports, risks, issues, and executive updates.
- Leads regular program status meetings and stakeholder reviews.
- Leads initiatives that improve operational efficiency and strengthen adherence to security objectives and service commitments.
- Supports forecasting of program demand, funding, and resource requirements.
- Guides change management activities involving priorities, scope, schedules, requirements, and security initiatives.
Program Oversight - Risk Management
- Manages highly complex security issues, bottlenecks, and risks, escalating appropriately.
- Conducts assessments of costs, benefits, and return on investment to support risk-informed decisions.
- Uses data and AI-enabled insights where appropriate to support decision making and mitigation planning.
- Balances business requirements, technical constraints, and security objectives when evaluating options.
- Removes blockers and identifies technical and resource alternatives to support successful execution.
Process Efficiency - Process Optimization
- Leads security program improvement initiatives through best practices and cross-team process optimization.
- Organizes and develops program objectives and workflows while deploying cross-functional solutions.
- Collaborates with management to implement AI-enabled efficiencies that improve visibility, reporting, forecasting, and execution.
Process Efficiency - Continuous Improvement
- Leads integration of continuous improvement practices across cybersecurity programs.
- Develops and standardizes data-driven decision-making frameworks.
- Identifies and addresses gaps affecting security posture, reliability, resilience, and operational effectiveness.
- Applies AI-enabled capabilities where appropriate to improve reporting, forecasting, trend analysis, anomaly detection, and workflow automation.
- Iterates processes using feedback, retrospectives, and KPI analysis.
- Defines requirements and configurations of existing and new development tools where applicable.
Collaboration and Program Leadership
- Facilitates collaboration across multiple organizations and technical disciplines.
- Leads efforts to optimize security processes and improve organizational efficiency.
- Delivers security program updates, risks, opportunities, and recommendations to leadership.
- Develops relationships with key stakeholders to ensure alignment and successful execution.
- Provides technical direction and mentorship to cross-functional teams.
- Influences organizational change and adoption of security initiatives.
Data and Analysis
- Creates and automates reporting, dashboards, forecasts, and metrics supporting program execution.
- Applies AI-enabled capabilities where appropriate to improve reporting automation, trend analysis, forecasting, anomaly detection, and decision support.
- Utilizes data to solve complex problems impacting program success and operational effectiveness.
- Conducts analysis of security, operational, and business data to support informed decisions and strategic planning.
Stakeholder Engagement
- Acts as a liaison across stakeholder teams to drive collaboration and successful delivery.
- Manages relationships with internal and external stakeholders to align priorities and commitments.
- Identifies stakeholder needs and works cross-functionally to implement solutions that improve satisfaction and security outcomes.
- Assesses risks to customer satisfaction and develops mitigation strategies.
- Balances stakeholder priorities and Oracle commitments to minimize program risk.
External Responsibilities
Technical Management and Execution - Security Management
- Leverages cybersecurity knowledge to identify risks, manage scope, estimate timelines, assess feasibility, identify testing requirements, and determine appropriate resources.
- Ensures product and service delivery meets security, privacy, compliance, third-party, export, and accessibility requirements.
- Drives rapid response to security escalations, coordinating across teams and communicating with leadership to assess risk, determine mitigation strategies, and align execution.
Forecasts program demands and resourcing requirements to identify risks and ensure achievable outcomes. - Leads implementation of evolving security processes to ensure organizational objectives and service commitments are met.
- Identifies opportunities to leverage AI-enabled capabilities to improve security operations, program execution, workflow automation, and reporting efficiency.
Technical Management and Execution - Security Strategy and Execution
- Utilizes security knowledge to identify, track, and manage program dependencies and risks.
- Supports incident response, vulnerability management, compliance initiatives, and security improvement programs.
- Supports planning by identifying dependencies, execution risks, and operational constraints.
- Develops delivery standards and guidelines aligned with Oracle security best practices.
- Identifies and quantifies opportunities for AI-enabled automation and operational efficiency improvements.
- Contributes to incident management efforts and identifies opportunities to improve security processes.
Program Oversight - Strategy and Decision Making
- Aligns security priorities with customers, service teams, and stakeholders through regular reporting and communication.
- Establishes scope and milestones for security programs aligned with Oracle security objectives and business goals.
- Assists in defining KPIs and measurement methods for security program performance.
- Builds, maintains, and executes communication strategies that support informed decision making and stakeholder alignment.
Program Oversight - Program and Operations Management
- Manages technical and non-technical cybersecurity programs impacting products and business operations.
- Guides program teams while providing security expertise and support in removing barriers and resolving issues.
- Maintains comprehensive program documentation including plans, status reports, risks, issues, and executive updates.
- Leads regular program status meetings and stakeholder reviews.
- Leads initiatives that improve operational efficiency and strengthen adherence to security objectives and service commitments.
- Supports forecasting of program demand, funding, and resource requirements.
- Guides change management activities involving priorities, scope, schedules, requirements, and security initiatives.
Program Oversight - Risk Management
- Manages highly complex security issues, bottlenecks, and risks, escalating appropriately.
- Conducts assessments of costs, benefits, and return on investment to support risk-informed decisions.
- Uses data and AI-enabled insights where appropriate to support decision making and mitigation planning.
- Balances business requirements, technical constraints, and security objectives when evaluating options.
- Removes blockers and identifies technical and resource alternatives to support successful execution.
Process Efficiency - Process Optimization
- Leads security program improvement initiatives through best practices and cross-team process optimization.
- Organizes and develops program objectives and workflows while deploying cross-functional solutions.
- Collaborates with management to implement AI-enabled efficiencies that improve visibility, reporting, forecasting, and execution.
Process Efficiency - Continuous Improvement
- Leads integration of continuous improvement practices across cybersecurity programs.
- Develops and standardizes data-driven decision-making frameworks.
- Identifies and addresses gaps affecting security posture, reliability, resilience, and operational effectiveness.
- Applies AI-enabled capabilities where appropriate to improve reporting, forecasting, trend analysis, anomaly detection, and workflow automation.
- Iterates processes using feedback, retrospectives, and KPI analysis.
- Defines requirements and configurations of existing and new development tools where applicable.
Collaboration and Program Leadership
- Facilitates collaboration across multiple organizations and technical disciplines.
- Leads efforts to optimize security processes and improve organizational efficiency.
- Delivers security program updates, risks, opportunities, and recommendations to leadership.
- Develops relationships with key stakeholders to ensure alignment and successful execution.
- Provides technical direction and mentorship to cross-functional teams.
- Influences organizational change and adoption of security initiatives.
Data and Analysis
- Creates and automates reporting, dashboards, forecasts, and metrics supporting program execution.
- Applies AI-enabled capabilities where appropriate to improve reporting automation, trend analysis, forecasting, anomaly detection, and decision support.
- Utilizes data to solve complex problems impacting program success and operational effectiveness.
- Conducts analysis of security, operational, and business data to support informed decisions and strategic planning.
Stakeholder Engagement
- Acts as a liaison across stakeholder teams to drive collaboration and successful delivery.
- Manages relationships with internal and external stakeholders to align priorities and commitments.
- Identifies stakeholder needs and works cross-functionally to implement solutions that improve satisfaction and security outcomes.
- Assesses risks to customer satisfaction and develops mitigation strategies.
- Balances stakeholder priorities and Oracle commitments to minimize program risk.
