Sr Dir, Threat Management & Protective Intelligence

Purpose:
The Senior Director, Threat Management & Protective Intelligence is responsible for the operational leadership and execution of UPMC’s enterprise threat management, protective systems, and intelligence programs. Reporting to the Vice President, Enterprise Safety & Security, this role translates enterprise security strategy into intelligence-led capabilities that protect UPMC’s people, operations, and critical activities. This leader serves as the organization’s authority for threat intelligence, threat management, travel security, and enterprise access control strategy. The role provides real-time situational awareness, operational guidance, and risk insights to support executive decision-making while ensuring alignment with enterprise priorities, governance, and risk tolerance.

Responsibilities:
 

• Lead enterprise threat intelligence and behavioral threat management programs, including oversight of the Systemwide Threat Assessment and Response Team (START), ensuring timely identification, assessment, and mitigation of threats. 
• Operationalize intelligence-driven risk assessments and mitigation strategies aligned with enterprise security priorities. 
• Deliver actionable intelligence, trend analysis, and risk insights to senior leadership and key stakeholders. 
• Advance and continuously improve enterprise workplace violence prevention programs in partnership with clinical, Human Resources, Legal, and operational leaders. 
• Establish and implement enterprise standards, training, and response processes to prevent and mitigate threats, aggression, and violence. 
• Partner closely with Human Resources, Legal, and Cybersecurity to identify, assess, and manage insider threat risks, ensuring coordinated, compliant, and intelligence-driven response strategies.
• Provide intelligence to enable advance planning, and operational coordination for Executive Protection activities.
• Lead governance and execution of international and high-risk travel security, including intelligence-driven traveler risk assessments, advisories, and partner coordination. 
• Oversee enterprise access control strategy and governance, including system standardization, policy development, and alignment with clinical, operational, and IT requirements. 
• Drive modernization and integration of access control technologies to support a unified, scalable enterprise solution aligned with security and operational priorities. 
• Design and mature enterprise security operations capabilities, including GSOC-aligned functions, to enhance situational awareness and incident coordination. 
• Integrate intelligence, protective services, public safety, and access control functions to strengthen response and escalation during incidents. 
• Partner closely with Cybersecurity and Information Security to monitor, assess, and align on emerging threats across physical, cyber, and insider risk domains, ensuring coordinated detection, escalation, and response. 
• Lead, develop, and manage high-performing teams, including hiring, coaching, and performance management. 
• Support budgeting, resource planning, and program prioritization aligned with enterprise security strategy. 
• Provide performance metrics, program evaluations, and reporting on emerging risks and effectiveness.