Director, Cybersecurity

A diversified organization is seeking a Director, Cybersecurity to provide enterprise-wide leadership for cybersecurity strategy, governance, and incident readiness. This senior role works closely with executive leadership and the board, with cybersecurity recognized as a top enterprise risk.
The Director will lead a centralized cybersecurity function within a hybrid technology environment, establishing enterprise standards and oversight while influencing across multiple business units and externally managed platforms. With strong internal capabilities and mature external monitoring already in place, the focus of this role is leadership and execution, translating technical risk into decisive action, guiding the organization through simulations and real incidents, and strengthening executive and board-level confidence.

Key Responsibilities   Lead enterprise cybersecurity strategy, governance, and risk management across the organization
Serve as the primary cybersecurity advisor to senior leadership and the board, translating technical risk into clear, actionable business insight
Own cybersecurity incident preparedness and response, including escalation protocols, executive communications, tabletop exercises, and post-incident reviews
Establish and enforce enterprise cybersecurity policies and standards across diverse application and operational environments
Lead and develop an internal cybersecurity team and oversee external security partners
Partner with technology and business leaders to embed cybersecurity requirements into systems, projects, and operational decisions
Manage cybersecurity risk across the extended ecosystem, including vendors and third-party platforms
Monitor the evolving threat landscape and guide pragmatic investments that strengthen resilience and readiness
Candidate Profile  Education & Certifications   Bachelor’s degree in Information Technology, Computer Science, or a related discipline
CISSP required; CISM, CRISC, or equivalent certifications considered strong assets
Experience & Expertise   10+ years of progressive experience in cybersecurity, information security, or IT risk roles
Proven leadership of enterprise-scale cybersecurity governance and incident response
Demonstrated ability to communicate cyber risk clearly and credibly to senior executives and boards, including in high-pressure scenarios
Strong understanding of enterprise IT environments, including infrastructure, networks, identity, cloud services, and security operations
Experience operating within vendor-managed or externally operated technology environments
Track record of influencing cross-functional stakeholders without direct authority
Experience managing hybrid security models combining internal teams with outsourced monitoring and response providers
Practical knowledge of cybersecurity frameworks such as NIST and ISO 27001
Personal Attributes   Strategic and pragmatic, with strong judgment and executive presence
Calm, credible, and decisive under pressure
Collaborative and diplomatic, able to earn trust across a complex organization
Accountable, transparent, and outcome-focused
Additional Information   Executive-level role with board exposure
This role is part of a confidential search and is not currently vacant
Company identity and location will be shared later in the process

#J-18808-Ljbffr