Engagement Lead (Security Observability & Risk Management)

Job Description:

Engagement Lead Security Observability & Risk Management

Engagement Context

Consulting program with a Tier 1 US financial services institution to evaluate the clients security telemetry define a CTOC aligned security observability architecture and design SOC dashboards and an implementation roadmap. The program runs in four phases: Discovery and Current State Security Intelligence Architecture Dashboard Design and Figma Mockups and Implementation Design and Roadmap with a clear runway into a follow on build phase.

Role Summary

Senior consulting lead accountable for program leadership stakeholder alignment and delivery of every phase artifact. Owns the client relationship at the program level runs governance cadence manages scope and change control and ensures the clients team delivers an outcome that gives the client a credible path from discovery into implementation.

Key Responsibilities

Own end to end delivery of the program against the SOW (deliverables milestones fixed price commitments)

Run governance cadence with client stakeholders (SOC Security Engineering DevSecOps Architecture leadership)

Facilitate stakeholder workshops during discovery to anchor current state findings

Coordinate the cross functional team (Security Architect SOC SME DevSecOps Data UX) and remove blockers

Manage scope risk and change control; raise formal Change Orders for anything outside SOW

Quality review every deliverable before client share: current state architecture telemetry inventory gap analysis observability architecture risk scoring framework dashboard prototypes implementation roadmap

Drive milestone walkthroughs tied to invoicing

Identify and shape the follow on implementation phase as the program progresses

Required Skills and Experience

12 years delivering technology consulting engagements with at least 5 years leading security observability SIEM/SOAR or risk platform programs

Track record running fixed price discovery and design engagements with Tier 1 financial services clients

Strong working knowledge of SOC and CTOC operating models security telemetry vulnerability management and detection and response workflows

Comfortable challenging client assumptions on alert noise vulnerability prioritization and remediation maturity

Excellent executive communication; able to present architecture and roadmap to CISO or CTOC leadership

Disciplined on scope risk and change control in a banking environment

Nice to Have

Prior delivery inside a top 5 US bank or systemically important financial institution

Familiarity with KEV EPSS MITRE ATT&CK and modern SOAR platforms

Experience positioning a follow on implementation off the back of a discovery