Director of Information Security at uvcyber

Make a difference here. UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams. By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India. We are seeking an experienced Senior Cybersecurity Leader to join our team as Director of Information Security. In this role, the successful candidate will provide information security program and technical leadership for the Ultraviolet Cyber organization internally, with a focus on our operational security and compliance. This role will require the ability to bridge the gap between business operations and cybersecurity risk management, ensuring that the organization's security posture is aligned with its strategic objectives.  The Director of Information Security will work closely with our IT team and our delivery teams to solve challenges in the secure delivery of offensive and defensive cybersecurity services to a wide range of global customers. The successful candidate will have a deep understanding of both technical and business aspects of cybersecurity, with a proven track record of leading high-performing teams in a rapidly evolving threat landscape. In addition to overseeing the organization's overall cybersecurity strategy and risk management, this role will also focus on tactical technical initiatives to monitor, manage, and strengthen UltraViolet Cyber's own cybersecurity posture. The Director of Information Security is the lead for incident response and preparation as well as oversees our compliance operations including third party risk management activities. In addition, the Director of Information Security has an opportunity to translate their experience and work at UltraViolet into thought leadership through various channels including conference speaking, whitepapers, webinars, and blog posts. What You'll Do: • Oversee a lean team of analysts and engineers • Reporting into the VP of IT, you will have the opportunity to impact the trajectory of our IT delivery • Conduct on-site risk assessments and provide recommendations for remediation to business leaders and stakeholders for both Ultraviolet Cyber and our customers • Develop and maintain relationships with key business partners, including IT, Risk Management, and Compliance functions • Collaborate with field teams to identify and mitigate security risks associated with new initiatives or projects at Ultraviolet Cyber customers • Develop, implement, and maintain comprehensive cybersecurity strategies and programs aligned with organizational goals and objectives • Provide strategic guidance on cybersecurity risk management and mitigation, including incident response and crisis management • Lead the development and maintenance of policies, standards, and procedures for a comprehensive information security, compliance, and IT risk management program • Drive cybersecurity as an enabler and value-add to the company’s core business functions • Develop and maintain a deep understanding of both technical and business aspects of cybersecurity to provide effective guidance to customers, field teams, and senior leadership • Collaborate with other functions, including IT, Risk Management, and Compliance, to ensure that cybersecurity is integrated into all aspects of the organization • Oversee the establishment and maintenance of a comprehensive cybersecurity incident response plan and a disaster recovery plan. • Manage and oversee the effective deployment of security technologies and software. • Develop and manage security strategies for vendor selection and evaluation and monitor and manage the security aspects of the vendor lifecycle • Communicate with stakeholders about the cybersecurity posture and strategies clearly and effectively • Prepare and/or present cybersecurity reports for the Board of Directors and other stakeholders What You Have: • Education: Bachelor's degree in Computer Science, Cybersecurity, or related field; advanced degrees preferredExperience: • 10-15 years of cybersecurity experience • At least 1 year of prior Sr Manager/Director experience (or equivalent role) • Proven track record of leading high-performing teams and driving business outcomes through effective risk management and mitigation • Demonstrated experience working with and supporting both internal stakeholders and customer/client stakeholders at all levels from direct contributor to executive leadershipSkills: • Strong understanding of technical and business aspects of cybersecurity, including cloud security, threat intelligence, and incident response • Excellent communication and interpersonal skills to effectively engage on complex security topics with both technical and non-technical stakeholders, including presenting to large audiences • Experienced in interacting and influencing key security stakeholders (VP+ and CISO/CIO/CTO level) in large Enterprise organizations • Ability to think strategically and make informed decisions in a rapidly evolving threat landscapeTechnical Skills: • Deep expertise with Microsoft Entra ID and Microsoft 365 including identity protection, conditional access, MFA, and hardening/secure baseline configurations • Experience with endpoint detection and response tools, particularly SentinelOne, including policy tuning and noise reduction as well as incident response and containment • Strong knowledge and experience with cloud (IaaS, PaaS, and SaaS) security architectures, strategies, and operations with particular emphasis on AWS and GCPPreferred Qualifications:Certifications: CISSP, CISM, or CEH certification; other relevant certifications preferred • Experience with cloud security platforms and tools • Experience leading cross-functional teams and implementing large-scale cybersecurity initiatives • Experience leading security initiatives in a global organization with multi-national operations including management of regional information security and data protection requirements • Experience leading security operations in an environment with MSSP-provided offensive and defensive security services What We Offer: • Competitive salary and performance-based incentives • Flexible working hours and remote-first culture • Career growth opportunities in a rapidly expanding company • Exposure to enterprise-level finance and payroll operations • Supportive team culture with a focus on excellence and collaboration • 401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed • Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment) • Group Term Life, Short-Term Disability, Long-Term Disability • Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness • Participation in the Discretionary Time Off (DTO) Program • 11 Paid Holidays Annually UltraViolet Cyber maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect our company's differing products, services, industries and lines of business. Candidates are typically placed into the range based on the preceding factors. We sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable. UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status.  If you want to make an impact, UltraViolet Cyber is the place for you!