Director of Cybersecurity

We are seeking a seasoned and visionary Director of Cybersecurity to lead and mature our organization’s security posture. This is a leadership role responsible for establishing strategy, owning execution, and driving a security-first culture across the enterprise. The ideal candidate is a self-starter who thrives with autonomy, can translate complex security challenges into actionable programs, and brings deep hands-on experience alongside the executive presence to influence at every level of the organization.

This role requires someone who is equally comfortable architecting Zero Trust frameworks, leading an incident response war room, and providing risk metrics for presentation to the executive team. You will assist in the full security lifecycle, from policy to tooling to people, and provide actionable information and propose solutions for protecting the organization’s assets, infrastructure, and data.

• Assist in defining and continuously improve the organization’s enterprise cybersecurity strategy and roadmap
• Lead security initiatives independently, with minimal oversight, from concept through successful delivery
• Build, mentor, and manage a high-performing cybersecurity team; foster a culture of accountability and continuous improvement
• Provide actionable intelligence and metrics for presentation to executive leadership on risk, compliance, and emerging threats
• Assist in establishing and maintaining security governance frameworks, policies, standards, and procedures
• Owns strategy and management of security operations

• Assist in the development, maintenance, and execution of the Incident Response (IR) program, including playbooks, tabletop exercises, and post-incident reviews
• Serve as the secondary incident commander for security events; coordinate cross-functional response teams
• Oversee threat intelligence operations and integrate findings into proactive defense strategies
• Conduct and oversee vulnerability management, penetration testing coordination, and risk remediation programs

• Manage end-to-end network security architecture including segmentation, monitoring, and access controls
• Manage and optimize network security tooling
• Implement and enforce Zero Trust network access (ZTNA) principles across on-premise and remote environments

• Own strategy and execution of testing security controls via automated testing, red/blue/purple teaming, and third-party penetration testing

• Provide guidance and assist in cloud security strategy, architecture, and compliance across multi-cloud and hybrid environments
• Oversee endpoint detection and response (EDR/XDR) programs
• Manage Mobile Device Management (MDM) programs; preferred experience with Microsoft Intune
• Administer and mature Identity & Access Management (IAM) using Role-Based Access Control (RBAC) principles along with Just in Time (JIT) access and Privileged Access Management (PAM)

• Oversee RMM/PSA security integrations
• Partner with IT operations to ensure security is embedded in all infrastructure and tooling decisions
• Work with the Dev Sec Ops  Manager to support Dev Sec Ops  practices, ensuring security is integrated throughout the software development lifecycle (SDLC)

• Assist the owner of the organization’s security controls for our compliance programs (e.g., SOC 2, ISO 27001, NIST CSF, or relevant frameworks)
• Conduct and oversee regular risk assessments, audits, and third-party vendor security reviews
• Maintain up-to-date knowledge of regulatory landscape and ensure organizational adherence

• Bachelor's or Master's…