Director Cybersecurity

We are seeking a hands‑on Director of Cybersecurity to lead the design, implementation, operation and continuous improvement of Bridgewater Bank’s cybersecurity architecture, engineering, and technology controls. This role combines strategic leadership with direct technical involvement across Azure, Microsoft 365, hybrid infrastructure, identity, SaaS platforms, applications, APIs, integrations, automation, and defensive security technologies. The Director is responsible for developing, coordinating, and executing cybersecurity capabilities aligned to the NIST Cybersecurity Framework (CSF), including security architecture, identity and access management, security operations, threat and vulnerability management, incident response, and cyber resilience.

The role leads the implementation and ongoing effectiveness of technology security controls designed to protect the bank's systems, applications, data, and customers.

The position partners closely with the Information Security Officer, Internal Audit, Compliance/ERM, and technology and business leaders to ensure alignment between cybersecurity operations, governance, risk management, and regulatory expectations. The Director also leads technology control assurance activities, supports Internal Audit and regulatory examinations, coordinates control testing across IT teams, and drives timely remediation and closure of identified issues.

• Lead technical architecture, standards, strategic roadmap development, vendor evaluation, and technology investment recommendations for Azure, Microsoft 365, hybrid infrastructure, SaaS platforms, web technologies, APIs, integrations, automation, and application enablement.
• Own the technical strategy and control design for Microsoft Entra /Azure AD, identity and access management, Conditional Access, phishing‑resistant multifactor authentication, single sign‑on, SAML/OIDC federation, SCIM/JIT provisioning, privileged access, service identities, and joiner‑mover‑leaver lifecycle controls.
• Lead technical cybersecurity incident response activities, including preparation, detection, containment, eradication, recovery, lessons learned, and coordination with the Information Security Officer and Bank’s Leadership Team.
• Collaborate with IT teams and the Information Security Officer to design and implement comprehensive security strategies, including controls, monitoring, vulnerability management, and reporting.
• Lead threat intelligence meetings and oversee the collection and analysis of relevant security information to proactively mitigate risks.
• Define and operate a technology control testing program (design and operating effectiveness) aligned to NIST CSF; coordinate testing execution across IT and control owners and report results, themes, and remediation needs.
• Manage technology audit and examination workflows, including coordination through Optro, remediation planning, issue tracking, validation of corrective actions, and closure reporting.
• Manage penetration test reporting and governance: coordinate scoping and deliverables with providers, communicate results to stakeholders, track remediation, and ensure retesting/closure activities are completed.
• Develop and deliver technology risk, controls, and audit status reporting to stakeholders including the Information Security Officer, CIO/CTO, ERM/Risk, Compliance, Internal Audit, and management/Board‑level committees as applicable; elevate emerging risks and control gaps with clear recommendations.
• Lead technical cybersecurity assessments of third‑party technology providers and partner with business and operational leaders to evaluate risk and implement appropriate security controls.
• Serve as a technical resource for key security functions including…