Director, Cybersecurity Information Technology and Operations

Description Director of Cybersecurity Technology and Operations Job Description Reports To

Chief Information Security Officer (CISO)

2 direct reports; 10 indirect reports

Spartanburg, South Carolina office - onsite

Up to 10%

Hands-on cybersecurity technology and operations leadership role

Position Summary

The Director of Cybersecurity Technology and Operations reports to the CISO and provides hands‑on technical and people leadership across the design, engineering, implementation, administration, and operation of enterprise information security capabilities. The role requires meaningful depth and breadth across both information technology and information security and is expected to remain actively engaged in architecture, engineering, technical decision-making, troubleshooting, and operational execution.

The Director leads a team of cybersecurity professionals while working collaboratively across the Information Security organization and in close partnership with Information Technology teams. Success requires sound judgment, transparent ownership of outcomes, disciplined execution, constructive challenge, and a strong commitment to building practical, resilient, and sustainable security solutions that support the organization's business objectives.

• Lead, coach, and develop a cybersecurity technology and operations team consisting of 2 direct reports and 10 indirect reports, establishing clear expectations, reinforcing ownership, and ensuring commitments are delivered with quality and professionalism.
• Serve as a hands‑on technical leader who can move effectively between strategy, architecture, engineering, implementation, administration, operations, incident support, and complex technical problem solving.
• Own and advance security operations center (SOC) engineering capabilities, including the architecture, integration, tuning, automation, reliability, and operational effectiveness of security monitoring, detection, investigation, and response technologies.
• Lead Blue Team engineering and defensive security operations, including the design and continuous improvement of detection content, telemetry coverage, threat‑informed monitoring, incident investigation and response workflows, endpoint and network defensive capabilities, security analytics, and automation that improves defensive speed, quality, and resilience.
• Lead Red Team and offensive security capabilities appropriate to the enterprise environment, including security testing, adversary emulation, attack‑path validation, control effectiveness testing, and coordinated exercises that identify exploitable weaknesses and provide actionable remediation guidance. Promote productive Blue Team and Red Team collaboration to validate detections, strengthen controls, and measurably improve defensive readiness.
• Provide security architecture leadership across enterprise technology domains, translating security requirements into practical reference architectures, design patterns, technical standards, and implementation guidance.
• Partner with application development and engineering teams to strengthen application security and CI/CD security through secure design, automated testing, code and dependency security controls, pipeline protections, secrets management, and security integration throughout the software development lifecycle.
• Architect, implement, administer, and continuously improve cloud security controls and services, working with cloud and platform teams to support secure configurations, identity and access controls, workload protection, network security, logging, monitoring, and policy enforcement.
• Lead and contribute directly to AI security, AI engineering, and AI automation initiatives,…