Director, Information Security

Accountabilities: Define and mature security operations frameworks, including runbooks, escalation models, operational procedures, and response standards.

Build and lead security operations capabilities supporting continuous monitoring, investigation, triage, escalation, and incident response.

Improve detection coverage and containment effectiveness through analytics, automation, orchestration, and modern security engineering practices.

Collaborate with IT teams to develop secure integrations, logging pipelines, security baselines, and monitoring capabilities across on-premises and cloud environments.

Oversee the security technology portfolio and establish roadmaps that continuously improve capability, coverage, and operational maturity.

Guide security configuration standards, system hardening, patching strategies, and vulnerability prioritization.

Plan and lead tabletop exercises, simulation drills, and other preparedness activities, incorporating lessons learned into security operations.

Manage relationships with external security providers and ensure service levels, performance, quality, and contractual commitments are maintained.

Oversee threat intelligence collection, enrichment, analysis, and operational application while maintaining visibility into the evolving threat landscape.

Lead proactive threat-hunting, anomaly-detection, and adversary-simulation activities to identify and address potential threats.

Oversee digital forensics, evidence handling, investigation activities, and post-incident reporting.

Manage the incident response program, including response roles, escalation paths, communication frameworks, and incident coordination.

Develop, maintain, and regularly test incident response playbooks covering emerging and ongoing cyber threats.

Track security program maturity, key risk indicators, operational performance, and compliance progress.

Develop dashboards, metrics, and executive-level reports that provide clear visibility into cybersecurity performance and risk.

Requirements:

Bachelor’s degree in Business Administration, Information Technology, Cybersecurity, or a related discipline, or equivalent professional experience.

10+ years of professional cybersecurity experience, including at least 7 years leading incident response, security operations, and threat management programs.

Extensive expertise with modern security operations technologies, including SIEM, SOAR, XDR/EDR, threat intelligence platforms, forensic tools, and cloud-native security monitoring solutions.

Strong understanding of cybersecurity operations, threat detection, incident response, threat hunting, digital forensics, and cyber resilience.

Demonstrated experience building and leading high-performing security teams and developing mature operational processes.

Strong ability to establish security frameworks, procedures, escalation models, metrics, and continuous improvement programs.

Experience working across cloud and on-premises environments, including security logging, integrations, hardening, monitoring, and vulnerability management.

Excellent verbal and written communication skills, with the ability to communicate effectively with technical teams, business stakeholders, and senior leadership.

Strong analytical, decision-making, problem-solving, and crisis-management capabilities.

Ability to manage multiple priorities and third-party relationships while maintaining a strong focus on security outcomes.

Certifications such as CISSP, CISM, CISA, and/or CRISC are preferred.

Experience working in regulated industries is preferred.

Benefits:

Competitive annual salary range of $210,000–$260,000 .

Full-time, experienced-level leadership opportunity.

Opportunity to lead and mature enterprise-wide cybersecurity and cyber resilience capabilities.

High-impact role with broad exposure across security operations, threat management, incident response, and technology.

Collaborative environment focused on professional development, innovation, and problem solving.

Flexibility designed to support personal and professional priorities.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1