The role maintains and enhances cyber resilience through partnership with the enterprise business, oversight of cyber recovery security requirements, coordination with IT on disaster recovery, cyber incident response planning, ransomware preparedness exercises, tabletop testing, and recovery readiness; IT retains ownership of technical disaster recovery execution. Oversee information security risk throughout the third-party vendor lifecycle, including security due diligence, risk assessments, control reviews, ongoing monitoring, remediation, and escalation of material security risks in partnership with Enterprise Risk Management, IT, vendor management, and business owners.