Director, Information Security and Technology. at ghsmartjobs

ghsmartjobs

United States·4d ago

DirectorFull-timeRustAzureGit

Salary Range

$195,500 - $264,500 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for an Enterprise Information Security Lead to join ghSMART, a premier leadership advisory firm. In this role, you will be responsible for enterprise information security and leading the information strategy, operations, and culture to keep ghSMART’s digital environment safe, resilient, and scalable.

Key Responsibilities

→Lead ghSMART’s enterprise information security program as the firm’s internal expert, driving strategy, operations, and continuous improvement.
→Develop, align, and execute the firm’s information security roadmap in partnership with key stakeholders.
→Define, implement, and continuously improve information security policies, standards, controls, and incident response practices.
→Manage key security vendor relationships, including the external SOC.
→Foster a strong culture of security awareness across the firm.
→Oversee ghSMART’s Azure environment and enterprise Microsoft ecosystem.
→Lead, develop, and scale a high-performing IT Support team.
→Own the end-to-end lifecycle of IT hardware and digital infrastructure.
→Own and oversee all technology spend, including software, hardware, and outsourced services.

Requirements

✓A bachelor’s degree in information security, information technology, computer science, or a related field, or equivalent experience.
✓8–10+ years of experience in enterprise IT, information security, or technology leadership roles.
✓Strong technical foundation across enterprise IT environments, including Microsoft 365, Entra ID, Windows endpoint management, cloud infrastructure, and modern security operations.
✓Deep expertise in information security governance, risk management, compliance frameworks, and security operations.
✓Experience defining and implementing security policies, controls, and incident response processes.
✓Proven experience leading and managing IT and cybersecurity teams.
✓Strong vendor and stakeholder management skills.
✓Demonstrated ability to lead through influence, drive firmwide change management, and clearly communicate complex technical and security concepts.