Directs enterprise cybersecurity risk governance, including risk assessments, risk register oversight, control maturity evaluations, risk acceptance decisions, remediation prioritization, third-party/vendor security risk review, and executive-level reporting on material cyber risks, business impacts, trends, and mitigation strategies. The position leads cybersecurity governance, risk management, security operations, incident response, regulatory compliance, third-party security risk, security architecture, and data protection, translating complex cyber risk into executive-level insight and integrating security into business strategy, technology planning, vendor management, and operational execution.