Director - Information Security

SUMMARY

The Director – Information Security is a CISO‑type role, serving as a strategic leader responsible for establishing, maintaining, and evolving the enterprise vision, strategy, and security program. The role reports directly to the CIO and oversees the design, implementation, and maintenance of security processes and technologies that protect information assets and reduce IT risks. The director sets security standards and controls, manages security technologies, and directs the creation and implementation of policies and procedures.

The position also leads IT technological strategies to support the company’s mission, ensuring effective operation of all IT systems and functions.

• Develop and maintain a culture of security across the organization, emphasizing enterprise‑wide responsibility.
• Create and execute a comprehensive cloud security strategy aligned with overall business goals.
• Design and execute multi‑year roadmaps for transforming the company’s environment, collaborating with internal stakeholders to achieve technological efficiencies.
• Develop strategic annual and long‑term business plans and operational budgets for IT areas; track implementation to meet financial and service targets.
• Lead and manage IT department activities, including overseeing multiple teams, prioritizing projects, and driving execution.
• Drive the incident response plan, ensuring leadership follows a well‑rehearsed cyber‑event response.
• Negotiate and manage service level agreements and vendor relationships, ensuring alignment with business objectives and budget constraints.
• Plan and allocate resources for security projects, driving efficient use of assets and ensuring ROI.
• Act as a change agent for new technologies and processes, overseeing the creation and maintenance of policies and procedures that protect the organization’s data.
• Collaborate with Legal, Government Relations, and Compliance teams to ensure adherence to relevant laws, regulations, and policies.

• Proven senior‑level IT management experience with a record of shaping and executing complex IT strategies.
• Executive presence and ability to gain consensus across all parties.
• Experience managing budgets ranging from $4 million to $10 million, demonstrating financial acumen.
• Strong communication skills to articulate complex technical concepts to non‑technical stakeholders.
• Leadership across multiple IT disciplines, including software development, technical support, and systems architecture.
• In‑depth understanding of computer systems, applications, operating systems, and data security protocols.
• Advanced decision‑making and problem‑solving skills.
• Bachelor’s degree in Information Technology, Business Development, or a related field (minimum).
• Master’s degree in a related field preferred.
• 12–15+ years of relevant professional experience, including 5–7+ years in a similarly sized company.
• Candidate must be eligible to work in the U.S.; the position does not support sponsorship or work‑as‑independent‑contractor (C2C).

• 401(k) retirement plan.
• Hybrid role: remote work permitted two days per week after 90 days (Wednesdays & Fridays).