GitHub Platform Lead

Summary:

The Global Advisory GitHub Platform Owner is accountable for the design, governance, security posture, and continuous evolution of the Global Advisory GitHub platform. This pivotal role operates as the product owner, architect, and subject-matter expert (SME) for GitHub, responsible for defining standards, guardrails, and enterprise ways of working.  A primary objective is to ensure GitHub functions as a controlled, auditable, and developer-centric enterprise delivery platform, especially as Global Advisory expands its use of pipeline-based security, AI-assisted development, and GitHub-native workflows. This position establishes clear accountability to maintain a secure, auditable, and scalable GitHub platform into the future, addressing the risks associated with part-time or non-expert ownership. This is a full-time ownership, architecture, and governance role focused on outcomes, and is explicitly not a platform support, administration, or ticket-driven operational function.

Key accountabilities

30%: Platform Ownership & Architecture: Own the end-to-end GitHub platform design, including organization structure, repository standards, branching strategies, and integration architecture. Establish and maintain clear, enforceable standards for GitHub configuration and developer ways of working. Act as the final decision authority for platform configuration, feature adoption, and architectural direction.    

25%: Security, Risk & Control Design: Design and govern the security and control model for GitHub, including pipeline-based security, secrets protection, and code scanning. Partner with GISG and GQRM to ensure controls are preventive, consistently enforced, and audit-ready. Define remediation patterns and ensure audit findings are converted into platform improvements. 

20%: Developer Enablement & Platform Quality: Define GitHub-native ways of working to reduce variability and improve delivery velocity. Design and evolve reusable workflows, automation patterns, and GitHub Copilot Agent strategies as shared platform capabilities. Ensure the platform enables developers to move faster through predictability, structure, and security.

15%: Operations Oversight & Governance: Provide architectural guidance, standards, and escalation support to the GitHub SMO / support team. Review operational trends, metrics, and recurring issues to eliminate root causes through design, not manual intervention. Maintain clear ownership boundaries and escalation paths.   

10%: Transition Stewardship & Continuous Improvement: Act as steward for GitHub-first delivery as Azure DevOps usage declines. Continuously evolve standards, guardrails, and integrations as GitHub capabilities, security requirements, and enterprise risk posture change. Prevent platform drift by proactively adapting to new GitHub features, security tooling, and AI capabilities.

This is the job for you if you have…[experience / knowledge / qualifications]

• Extensive experience architecting or owning GitHub Enterprise platforms at an organizational scale, including defining strategic vision for its evolution and governance, and demonstrating leadership in platform modernization strategy and adoption.
• Deep expertise in DevSecOps and secure SDLC design, encompassing pipeline-based security controls, such as the integration of SAST/DAST/SCA tooling, secrets protection, and vulnerability management.
• Proven ability to design and govern security controls that are effectively enforced by platform patterns, ensuring audit-readiness by design and driving systemic fixes over operational workarounds.
• Skilled in defining scalable, developer-centric standards and workflows that reduce variability and improve delivery velocity, including practical experience with GitHub-native ways of working, branch/merge strategies, and integrating AI-assisted development tools like GitHub Copilot.
• Comfort operating as a single accountable owner within a federated enterprise environment, with the authority to make final decisions on platform configuration, feature adoption, and architectural direction.
• Strong collaborative partnership skills with Security, Risk, Architecture, and Operations stakeholders, bringing engineering rigor and architectural perspective to compliance, standards, and organizational change initiatives.
• Excellent written and verbal communication abilities, capable of producing clear standards, architectural guidance, and executive-level materials for a diverse audience.