Govt. Director of IT Security

POSITION SUMMARY:

The Director of IT Security is responsible for the resources, processes, systems, policies, procedures, and cyber strategy to protect the entire tribe, including all government, gaming, health, and enterprise divisions. This position works closely with managers and executives across the tribe to promote strong security practices and to understand potential cybersecurity vulnerabilities. The Director of IT Security is responsible for maintaining current knowledge of evolving cyber threats, new security tools, and best practices.

• Develop, implement, and maintain comprehensive security policies and procedures to safeguard the organization’s systems, data, and people.
• Identify, assess, and manage security risks; own the vulnerability management program including prioritization and remediation reporting.
• Design and oversee the security architecture across on-premises and cloud environments, ensuring it aligns with business goals and industry best practices.
• Oversee security operations and continuous monitoring across network, endpoint, and cloud systems; ensure timely detection, triage, and response to threats.
• Establish and lead incident response plans, including testing and training; coordinate and respond to all security incidents, ensuring timely resolution and minimizing impact.
• Define, support, and coordinate security training programs to educate employees about security policies, procedures, and best practices, and foster a culture of security awareness across the organization.
• Manage security audits and assessments to identify vulnerabilities and weaknesses in the organization’s IT infrastructure and take corrective actions to address findings.
• Ensure compliance with relevant laws, regulations, and industry standards (including HIPAA, PCI-DSS, MICS, CJIS, and tribal data sovereignty requirements).
• Oversee third-party risk management, including vendor security assessments, contract security clauses, and ongoing supplier risk reviews.
• Present security posture, risk metrics, threat landscape summaries, and program performance to the CIO, executive leadership, and Board of Directors.
• Develop and manage the IT Security budget, collaborating with the CIO and Executive Technology Steering Committee on needs and priorities, and allocate available resources effectively to address security priorities.
• Lead, mentor, and guide a team of IT security professionals, motivating them to deliver on the organization’s security objectives.

• Research and evaluate emerging security technologies and tools; recommend solutions to enhance the organization's security posture.
• Define and test business continuity and disaster recovery plans for security-relevant systems; lead annual tabletop exercises.
• Develop and maintain policies governing employee use of generative AI tools and security review of AI-powered products.
• Partner with IT, Dev Ops, and engineering teams to embed security requirements into system development, cloud architecture, and deployment pipelines.

Immediate peers, peers in other departments, immediate supervisor/manager, managers in other departments, Executives, Board of Directors, customers, and outside vendors/service providers.

Position medium with lifting of 50 pounds maximum and frequent lifting and carrying up to 25 pounds. Physical factors include constant sitting, near and midrange vision, typing; frequent walking, use of hearing, color vision, and driving; and occasional carrying/lifting, pushing/pulling, climbing, stooping, kneeling, crawling, reaching, manual handling, use of smell, far vision/depth perception, field of vision, and bending. Working conditions include occasional exposure to weather, heat, cold, wet/humidity, noise, vibration, and air quality.

Potential hazards include constant computer use and occasional exposure to moving mechanical parts, electric shock, high exposed places, chemicals, client contact, and medical equipment use.

Education:

Bachelor’s Degree in Computer Science,…