Director, Cybersecurity

BITCO Corporation is seeking a Director, Cybersecurity, to join our home office located in Davenport, IA
. As a respected specialty insurer with 11 branch offices across 10 states, BITCO delivers tailored insurance solutions to complex industries such as construction, forest products, and oil and gas. This position is open to a hybrid work arrangement, blending flexibility with meaningful in-person collaboration.

At BITCO, our work is guided by core values. We care deeply about our people, partners, and customers. We are committed to excellence and accountability. We deliver on our promises with integrity and precision, and we strive to make a meaningful impact in everything we do. These values drive our mission to protect the people and industries that keep America running.

Join the BITCO team and be part of a workplace built on collaboration, open communication, and a positive culture that supports growth and success. If you are passionate about operational excellence and ready to make a measurable impact within a growing, industry-leading organization, BITCO offers the platform and challenge you have been looking for.

Position Summary:

The Director, Cybersecurity is responsible for overseeing all aspects of cybersecurity and IT compliance/audit shared services information systems, ensuring we remain protected against cyber threats and in compliance with regulatory and company governance. This role will help lead the strategy, prioritization, implementation, and continuous improvement of the company’s cybersecurity/compliance/audit frameworks, policies, and processes. This includes managing a team of cybersecurity professionals across application/data, identity access management, operations, and audit/compliance.

This key role combines firsthand technical activities with leadership responsibilities, managing a team of security and compliance professionals to safeguard our company.

Primary Responsibilities:

• Build and drive our cybersecurity program, strategy, implementation, and maturity roadmap and controls reporting in partnership with our CIO and Old Republic Business Information Security Officer (BISO)
• Directs the work of the Cybersecurity team, including the quality, quantity, and timeliness of work to meet organization, department, and project goals and objectives
• Maintains direct credibility across all facets of cybersecurity including networks, applications, SaaS platforms, end-point protection, vulnerability management, and vendor/supply chain management
• In partnership with business and IT leadership establish, manage, and implement a multi-year cybersecurity roadmap
• Establish security-by-design principles across infrastructure, applications, and enterprise data
• Identify, evaluate, and mitigate risks that could impact the organization. This includes analyzing and responding to potential risk scenarios, assessing their impact, and developing strategies to manage or mitigate risks
• Partner with and mentor the operations teams across M365 hardening, cloud security, network design, endpoint security, vulnerability/patch management and threat analysis and remediation
• Engages and partners across IT Leadership and Business Teams to ensure security and audit best practices and standards are integrated into all work streams to ensure a security/audit mindset with appropriate artifact collection
• Lead the review and strengthening of the Business Disaster Recovery, Business Continuity, and Incident response, including the annual review and testing processes
• Lead the development and implementation of recovery plans to restore normal operations after a security incident
• Prepare reports and maintain detailed records on governance, risk management, and compliance activities;
  Prepare detailed reports on security incidents, threats, and overall security landscape. Documents processes, incidents, and lessons learned
• Coordinate and work with BITCO and ORI Internal Audit for all requests – using members of broader organization to ensure responses and controls are completed in a timely, consistent, and auditable fashion
• Monitors and restricts access to sensitive, confidential, or other high-security data
• Oversee and govern the performance of regular system audits and updates to ensure security controls are effective
• Participate in IT Change Advisory Board to ensure production releases meet documented security standards
• Collaborates with users to discuss computer information access needs, to identify security threats and violations, and to identify and recommend needed programming or process changes
• Uses data encryption, firewalls, and other appropriate security tools and applications to conceal and protect transfers of confidential digital information
• Develops and implements plans to safeguard digital data from accidental or unauthorized modification, destruction, or disclosure; adheres to emergency data processing needs
• Reviews violations of security procedures; coordinates and provides training to ensure violations do not recur
• Modifies…