Asurion

Procurement

• Create and evolve the accessory merchandising strategy for uBreakiFix by Asurion across in-store and e-commerce channels
• Assess internal and industry data to size the accessories market
• Lead product strategy, assortment, inventory forecasting and lifecycle management, merchandising, vendor management, and negotiations
• Own accessory P&L performance, including revenue, gross margin, and inventory turns
• Coordinate with buying, pricing, marketing, finance, demand planning, operations, and other cross-functional stakeholders
• Lead e-commerce merchandising, including assortment, P&L, product listings, and promotional calendar
• Partner with franchisees to drive adoption and improvements in the accessory business
• Consult on store construction and retrofits to design accessory front-of-house flow and implement the new strategy
• Provide input to annual budgeting and planning for the accessories business
• Build relationships across departments and management levels and anticipate coaching needs
• Travel approximately 20%, including overnight travel

Senior Category Manager

Data Engineer

• Own the Data Platform roadmap from ingestion to self-service analytics layer.
• Define onboarding processes for teams, establishing contracts, SLAs, and quality checks.
• Drive self-service experience for analysts and data scientists.
• Partner with engineering on architecture decisions.
• Align teams around a shared platform vision.
• Hire and lead a team of data-fluent PMs.

Director, Product Management – Data Platform

Risk

• Collaborate with Sr Product Manager to create specific and succinct requirements for delivering data-driven tools to Risk Managers
• Participate in Agile ceremonies with a goal of helping manage Development teams
• Analyze and fill gaps in requirements that arise during development to reduce developer downtime
• Manage projects that require multiple teams to cross the finish line together for products to be delivered
• Evaluate and help groom the product backlog to ensure that asks are still relevant, organized, and prioritized according to user needs
• Drive cross-functional collaboration to design and implement system/process improvements that enhance claims adjudication accuracy and regulatory alignment

Risk Manager

Compliance

• Help identify and trend fraudulent activity and compliance issues through interaction analysis
• Perform qualitative and quantitative analysis to understand and report on impactful trends to customer experiences and business targets
• Utilize voice analytics software to find specific call types and create custom views that add business value
• Conduct thorough and accurate audits of customer interactions and Expert performance utilizing various lead generation sources, such as machine learning models

Sales Compliance Specialist, Bilingual

Director

• Own and continuously improve the cyber and technology risk management framework, methodology, taxonomy, and lifecycle aligned to NIST CSF 2.0, ISO 27001/27005, and applicable regulatory obligations.
• Define standards, procedures, and rating scales for consistent enterprise-wide risk identification, assessment, and reporting; partner with the PISO model to ensure common language and practices across portfolios.
• Lead enterprise cyber risk assessments across technology, business, regulatory, and emerging-risk domains to produce consistent, defensible determinations.
• Establish and operate a cyber risk quantification capability (e.g., FAIR-based) to express risk in business and financial terms and inform prioritization and investment decisions.
• Maintain the enterprise cyber risk register; ensure risks are well-described, owned, rated, and tracked to acceptable residual levels; develop and manage KRI/KCI programs for forward-looking posture.
• Operationalize the risk appetite and tolerance framework with the CISO and senior leadership; own risk acceptance and exception governance with clear, auditable documentation and time-bound approvals.
• Govern cyber risk policy structure, ownership, review cadence, and exception handling; chair or support cyber risk forums and escalate decisions to appropriate authority levels.
• Lead second-line, risk-based assurance over design and operating effectiveness of key cyber controls in coordination with first-line and Internal Audit; identify thematic weaknesses and drive structural remediation.
• Own issues and remediation management—intake, prioritization, owner assignment, tracking to closure, and escalation of aging items.
• Define and report outcome-focused metrics (e.g., residual risk trends, out-of-appetite reduction, early-versus-late finding ratios, incidents tied to accepted risk) in executive- and board-ready formats.
• Serve as primary point of contact for cyber risk in regulatory exams, audits, and carrier-partner due diligence.
• Integrate cyber risk into Enterprise Risk Management to ensure consistency in enterprise risk reporting and governance; partner with Legal, Privacy, Procurement, and technology leaders to embed risk-informed decisions.
• Oversee vendor/third-party risk within the cyber risk portfolio to ensure supply-chain risk is governed in line with enterprise practices.
• Build, lead, and develop a team of senior managers and analysts; set objectives, manage performance, and scale capacity through process improvement, tooling, and appropriate AI-assisted workflows.

Director, Cyber Risk

• Define and own the enterprise Human Risk Management strategy.
• Establish governance for the human-risk domain.
• Build, lead, and develop a small expert team.
• Partner with multiple departments to embed risk practices.
• Use analytics and AI to identify high-risk cohorts.
• Implement in-the-moment behavioral guidance.

Senior Manager, Human Risk Management

• Own strategy, design, and continuous improvement of the Third-Party/Vendor Risk Management (TPRM) program
• Define and maintain TPRM policy, standards, procedures, and risk-tiering methodology
• Establish third-party risk appetite and tolerance thresholds with CISO and GRC leadership
• Embed risk gates within sourcing, onboarding, contracting, renewal, and offboarding
• Lead the full vendor risk lifecycle: intake, inherent-risk classification, due diligence, residual-risk determination
• Operationalize inherent-risk tiering to scope assessment depth and cadence
• Direct security, privacy, and resilience assessments using methodologies such as SIG/Shared Assessments
• Evaluate fourth-party/Nth-party dependencies, vendor concentration, and systemic risk
• Establish and lead risk reviews for third-party AI/GenAI tooling
• Coordinate third-party incident response with SOC/IR
• Manage the third-party risk register and findings inventory
• Develop a standardized library of contractual security requirements
• Define and report outcome-driven metrics and KRIs