Director of Cyber Security

• Define and execute the organization’s cybersecurity strategy, roadmap, and operating model with the CISO and senior teammates
• Ensure security initiatives are measurable, operationally actionable, and aligned with business priorities
• Lead, mentor, and support a global team of security engineers across incident response, vulnerability management, IAM, and application security
• Own day-to-day security program operations, including threat detection and response, vulnerability management, and endpoint security
• Partner with engineering, infrastructure, and product teams to embed security into system development and operations
• Manage vendor relationships and contribute to security tooling and services budget planning
• Support hiring, onboarding, and career development of team members
• Foster a culture of learning, collaboration, and continuous improvement
• Champion AI and automation to improve team operations
• Evaluate emerging threats and technologies, including AI security implications

• 10 or more years of progressive experience in cybersecurity or a closely related field, including significant people-leadership experience
• Demonstrated success building or maturing security programs in a complex, technology-driven environment
• Strong experience across multiple security domains, such as security operations, incident response, vulnerability management, IAM, cloud security, application security, or security architecture
• Strong technical skills in endpoint and server operating systems, especially Linux
• Knowledge of computer networking, firewalls, and Kubernetes
• General understanding of NIST CSF, CIS, SOC 2, and PCI-DSS frameworks
• Excellent communication skills, with the ability to explain technical risk clearly to executives, engineers, and business partners
• Experience developing meaningful security metrics and reporting progress to senior leadership
• Ability to work in a hybrid model and attend the Concord office at least 3 days a week
• Equivalent experience, training, or transferable skills accepted in lieu of a relevant degree
• Curiosity about emerging technologies, including AI and automation
• Must be able to work from the required office at least 3 days per week
• Must not require US visa sponsorship; KAYAK cannot offer work sponsorship, including OPT, at this time

Demonstrates extensive experience in defining and executing cybersecurity strategies, leading global security teams, and embedding security practices within technology operations. Proficient in developing security metrics and managing vendor relationships while fostering a culture of continuous improvement and collaboration.

• Cybersecurity Strategy Development
• People Leadership in Security
• Incident Response Management
• Vulnerability Management
• Cloud Security Expertise

• Cybersecurity
• Incident Response
• Vulnerability Management
• Identity And Access Management (IAM)
• Application Security
• Endpoint Security
• Linux Operating Systems
• Computer Networking
• Firewalls
• Kubernetes

• Excellent Communication
• Mentoring
• Collaboration
• Curiosity About Emerging Technologies

• Cybersecurity Programs
• Security Operations
• Technology-Driven Environment
• Security Metrics
• Hybrid Work Model

• Security Tooling
• AI Automation
• NIST CSF
• CIS
• SOC 2
• PCI-DSS