Loading...
DirectorFull-time
Salary Range
$195,500 - $264,500 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for an experienced cybersecurity leader to establish and mature our Information Security and Governance, Risk, and Compliance (GRC) program from the ground up. This is a high-impact role where you'll architect a formal company-wide security strategy and lead critical compliance initiatives.
Key Responsibilities
- →Establish and execute a comprehensive information security strategy covering governance, risk, compliance, and cybersecurity operations
- →Lead enterprise-wide risk management and reporting aligned with organizational risk tolerance
- →Provide independent oversight of information security practices
- →Serve as the organization's subject matter expert for information security and cybersecurity risk
- →Develop, maintain, and enforce information security policies, standards, and procedures
- →Lead tech compliance efforts for SOC 2, HIPAA, and FDA regulatory requirements
- →Manage third-party risk management efforts, including vendor security assessments
- →Conduct business impact analyses and maintain business continuity and disaster recovery planning initiatives
- →Lead and mentor a team of information security professionals
- →Oversee identity and access management, data protection, and security monitoring capabilities
- →Direct incident response activities, including investigation, containment, and remediation
- →Collaborate with Legal, Human Resources, Compliance, Facilities, and Executive Leadership
- →Drive organization-wide security awareness and training programs
Requirements
- ✓Bachelor's degree in information systems, computer science, business, or related discipline
- ✓Industry certifications such as CISSP, CISM, or CISA
- ✓8+ years of progressive experience in information security, risk management, or cybersecurity
- ✓6+ years in a leadership or management role
- ✓Expert knowledge of security frameworks and regulatory standards (ISO 27001, HIPAA, SOC 2)
- ✓Extensive experience building and operating enterprise information security programs in regulated environments
- ✓Expertise in governance, risk, and compliance (GRC) frameworks
- ✓Deep knowledge of third-party/vendor risk management
- ✓Proven incident response and threat management capabilities
- ✓Experience designing and implementing security awareness and training programs
- ✓Familiarity with security technologies such as firewalls, VPNs, access controls, and monitoring tools
- ✓Ability to assess business risk and apply practical, risk-based security controls
- ✓Proven ability to manage multiple initiatives, meet deadlines, and lead cross-functional collaboration
- ✓Strong written and verbal communication skills with the ability to influence at executive levels
- ✓Strategic thinker who can also execute tactically
