Director of Cyber Security

Job Description

We are seeking an experienced Director of Cyber Security to lead and execute the organization’s enterprise cybersecurity strategy, ensuring the confidentiality, integrity, and availability of critical business systems and data. This executive leadership role is responsible for overseeing Security Operations, Cloud Security, Security Engineering, Governance, Risk & Compliance (GRC), Identity and Access Management (IAM), and Incident Response.

The ideal candidate will partner with executive leadership, IT, engineering, legal, and business teams to build a proactive security program that aligns with business objectives while managing evolving cyber threats. The Director of Cyber Security will also lead security transformation initiatives, establish enterprise security policies, manage security teams, and ensure compliance with industry regulations and standards.

Key Responsibilities

• Develop and execute the organization’s enterprise cybersecurity strategy and roadmap.
• Lead Security Operations Center (SOC), Security Engineering, Cloud Security, GRC, and Incident Response teams.
• Establish and maintain enterprise-wide cybersecurity policies, standards, and governance frameworks.
• Oversee security architecture for cloud, on-premises, and hybrid environments.
• Direct incident response, cyber investigations, and business continuity planning.
• Manage vulnerability management, penetration testing, and security assessments.
• Collaborate with executives and business leaders to align cybersecurity initiatives with organizational goals.
• Oversee Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust initiatives.
• Manage third-party security risk assessments and vendor security programs.
• Ensure compliance with frameworks and regulations such as NIST CSF, ISO/IEC 27001, SOC 2, PCI DSS, HIPAA, FedRAMP, and GDPR where applicable.
• Develop cybersecurity metrics, executive dashboards, and board-level security reports.
• Lead disaster recovery and cyber resilience initiatives.
• Manage cybersecurity budgets, technology investments, and vendor relationships.
• Mentor, recruit, and develop high-performing cybersecurity teams.
• Stay informed on emerging cyber threats, technologies, and regulatory requirements.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field.
• Master’s degree (MBA, Information Security, or Cybersecurity) preferred.
• 10–15+ years of progressive experience in cybersecurity, with at least 5 years in a leadership or management role.
• Proven experience leading enterprise cybersecurity programs and cross-functional security teams.
• Strong knowledge of cloud security (AWS, Microsoft Azure, Google Cloud Platform), network security, application security, and security architecture.
• Experience managing Security Operations Centers (SOC), Incident Response, Threat Intelligence, and Vulnerability Management programs.
• Strong understanding of Identity and Access Management (IAM), Zero Trust Architecture, and Privileged Access Management (PAM).
• Experience with cybersecurity governance, risk management, and compliance frameworks.
• Excellent leadership, communication, budgeting, and stakeholder management skills.

Preferred Certifications

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CCSP (Certified Cloud Security Professional)
• CRISC (Certified in Risk and Information Systems Control)
• GIAC Certifications (GCIH, GCIA, GPEN)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• AWS Certified Security – Specialty
• Certified Ethical Hacker (CEH) (preferred)

Technical Skills

• Enterprise Security Strategy
• Security Operations Center (SOC)
• Security Information and Event Management (SIEM)
• Microsoft Sentinel
• Splunk
• Microsoft Defender XDR
• CrowdStrike Falcon
• Palo Alto Networks
• Cisco Secure
• AWS Security
• Microsoft Azure Security
• Google Cloud Security
• Identity and Access Management (IAM)
• Privileged Access Management (CyberArk, BeyondTrust)
• Okta
• SailPoint
• Zero Trust Architecture
• Security Automation & SOAR
• Incident Response
• Threat Intelligence
• Vulnerability Management
• Penetration Testing
• Governance, Risk & Compliance (GRC)
• NIST CSF
• ISO/IEC 27001
• SOC 2
• PCI DSS
• HIPAA
• FedRAMP
• DevSecOps
• Terraform
• Kubernetes
• Docker
• Python
• PowerShell
• GitHub Actions
• Jenkins

Preferred Soft Skills

• Executive leadership
• Strategic planning
• Risk management
• Decision-making
• Team leadership and mentoring
• Cross-functional collaboration
• Crisis management
• Stakeholder communication
• Budget and vendor management
• Business acumen
• Analytical thinking
• Problem-solving

Benefits

• Competitive executive compensation package with annual performance bonus.
• Medical, dental, and vision insurance.
• Employee stock purchase plan or equity awards (where applicable).
• Flexible remote or hybrid work arrangements.
• Professional development and executive leadership training.
• Certification reimbursement and conference sponsorship.
• Life and disability insurance.
• Career progression opportunities into Vice President of Cyber Security, Chief Information Security Officer (CISO), or Chief Security Officer (CSO).