Director of Information Assurance

Rezult Group continues to make great strides toward enhancing the technology services community nationwide. We are consistently looking for qualified professionals to join us in achieving success.

Currently we are searching for a Director of Information Assurance to fulfill an immediate full-time vacancy. This position is a Full-Time, Direct Hire position that sits onsite in southeast Alabama.

• Own and continuously mature the enterprise information security program - strategy, multi-year roadmap, and risk based capability model - while staying hands on with daily security operations, monitoring, and incident response
• Direct security monitoring and detection operations including SIEM, EDR, network detection, and identity threat detection, whether delivered in house, through a managed provider, or a hybrid model
• Own the incident response program end to end: maintain IR plans/playbooks, lead triage and containment, direct root cause analysis, and serve as incident commander for high severity events
• Manage the enterprise vulnerability management lifecycle - scanning, risk based prioritization, remediation SLAs, and verification - and direct penetration testing, red team exercises, and phishing simulations
• Maintain the enterprise risk register, lead risk assessments and control gap analyses, and align the program to a recognized framework (NIST CSF, CIS Controls, or ISO 27001)
• Lead a small, experienced security team (analysts and operators across junior through senior levels), providing coaching, career development, and operational structure for a 247 capable environment
• Own the security awareness and training program for the broader employee base, and deliver executive level briefings translating technical risk into business terms

• 10+ years of IT experience, including 5-7 years in information security/cybersecurity and at least 3 years in a formal leadership role with direct reports and budget accountability
• Demonstrated ownership of an enterprise security program, including policy development, risk assessment, and executive reporting
• Hands on operational depth in security monitoring, incident response, and vulnerability management, including documented experience leading response to at least one significant security incident
• Working knowledge of network security, endpoint security, identity and access management, and cloud security in a hybrid on prem/cloud environment
• Practical command of at least one major security framework (NIST CSF, NIST 800-53, CIS Controls, or ISO 27001)
• CISSP required or strongly preferred; CISM, CRISC, CISA, or relevant GIAC certifications also valued
• Strong communicator able to translate technical risk for non technical/executive audiences, with sound judgment operating under pressure and resource constraints