Director, Cybersecurity

The Director, Cybersecurity is a critical role within the organization and is responsible for overseeing and managing all aspects of cybersecurity to ensure the confidentiality, integrity, and availability of the organization's information systems and data.

Leadership and Strategy:

• Develop and implement a comprehensive cybersecurity strategy and program aligned with the organization's business goals and risk tolerance.
• Provide strategic direction to the cybersecurity team and ensure alignment with overall organizational objectives.
• Collaborate with executive leadership to communicate the importance of cybersecurity and gain support for initiatives.

Risk Management:

• Identify and assess cybersecurity risks to the organization's information systems and data.
• Develop and implement risk mitigation strategies and controls.
• Monitor and evaluate the effectiveness of risk management processes.

Policy and Compliance:

• Develop and enforce cybersecurity policies, standards, and procedures.
• Ensure compliance with relevant regulations, laws, and industry standards.
• Keep abreast of changes in cybersecurity laws and regulations and adjust policies accordingly.

Incident Response and Investigation:

• Develop and maintain an incident response plan.
• Lead the response to cybersecurity incidents, including coordinating with internal and external stakeholders.
• Conduct investigations into security incidents and breaches.

Security Architecture:

• Oversee the design and implementation of secure information systems and networks.
• Ensure that security controls are integrated into the organization's architecture and infrastructure.

Security Awareness and Training:

• Develop and deliver cybersecurity awareness and training programs for employees.
• Foster a culture of security awareness throughout the organization.

Vendor Management:

• Assess and manage the cybersecurity risk associated with third-party vendors and service providers.
• Establish and maintain strong partnerships with vendors to enhance overall cybersecurity posture.

Budget Management:

• Develop and manage the cybersecurity budget, ensuring the allocation of resources to address the most critical risks.
• Identify cost-effective cybersecurity solutions.

Reporting and Communication:

• Provide regular reports to executive leadership and relevant stakeholders on the state of cybersecurity.
• Communicate complex cybersecurity concepts in a clear and understandable manner.

• 10 years of technical experience in Cybersecurity or a combination of Cybersecurity and closely related technical field.
• 5 years of people management experience
• 6 years hands on experience performing threat detection and response.
• Bachelor's degree required; bachelor's or advanced degree in Management, Computer Science, or other technical discipline
• Relevant certifications (e.g., CISSP, CISM, CISA) (preferred)