Cybersecurity Director – Data Protection, Security Architecture & Third-Party Risk

## Cybersecurity Director – Data Protection, Security Architecture & Third-Party Risk Apply:
Richardson, TX:
Full time:
Posted Yesterday:
JR106220

Texas Capital is built to help businesses and their leaders. Our depth of knowledge and expertise allows us to bring the best of the big firms at a scale that works for our clients, with highly experienced bankers who truly invest in people’s success — today and tomorrow.

While we are rooted in core financial products, we are differentiated by our approach. Our bankers are seasoned financial experts who possess deep experience across a multitude of industries. Equally important, they bring commitment — investing the time and resources to understand our clients’ immediate needs, identify market opportunities and meet long-term objectives. At Texas Capital, we do more than build business success.

We build long-lasting relationships.

Texas Capital provides a variety of benefits to colleagues, including health insurance coverage, wellness program, fertility and family building aids, life and disability insurance, retirement savings plans with a generous 401K match, paid leave programs, paid holidays, and paid time off (PTO).Headquartered in Dallas with offices in Austin, Fort Worth, Houston, Richardson, Plano and San Antonio, Texas Capital was recently named Best Regional Bank in 2024 by Bankrate and was named to
* The Dallas Morning News*’ Dallas-Fort Worth metroplex Top Workplaces 2023 and Go Banking Rate ’s 2023 list of Best Regional Banks. For more information about joining our team, please visit us at  Summary / Mission The Information Security Director leads the enterprise Data Protection, Security Architecture, and Third-Party Cyber Risk Management functions. This role owns the operating model and outcomes for protecting sensitive data across on-prem, cloud, and endpoint environments;

directs a team of security architects that define and govern security architecture standards and technology reviews; and runs a scalable vendor due diligence and contract-security requirements program with clear governance and exception handling. The role also partners closely with the Incident Response (IR) team to ensure preparedness, clear reporting obligations, and effective response execution across internal and third-party events.## Reporting line & scope
* *
* Reports to:

** CISO
* ** Teams / functions owned:*** + Data Protection (classification, DLP, encryption, data handling rules, monitoring/response workflows) across endpoint, cloud, and on-prem.(2)  + Security Architecture (enterprise security architecture blueprint, patterns/standards, architecture reviews for new technologies).  + Third-Party Cyber Risk (vendor security due diligence, ongoing monitoring, security addendum/contract requirements, exception governance).  + 3rd Party Cyber Incident Response (operational oversight/enablement; define requirements, playbooks, testing, coordination across teams and vendors).##

Key responsibilities###
1) Data protection program leadership (on-prem, cloud, endpoint)
* Own the enterprise
** data protection strategy and operating model**, including classification/labeling, handling rules, DLP, and measurable enforcement outcomes.
* Establish a
** sustainable classification approach** (e.g., small, understandable taxonomy tied to handling expectations and controls) and ensure governance/ownership remains active over time.
* Implement a phased enforcement approach for DLP (visibility → user education → controlled override → targeted enforcement) to reduce false positives and operational friction.
* Define exception processes, review cadence, and tuning workflows so data protection does not become “set-and-forget” shelfware.
* Partner with IT, risk, privacy, legal,…