The Director of Cyber Security is a senior leader responsible for establishing and maintaining the enterprise cybersecurity vision, strategy, culture, and program established by the CISO to protect information assets and technologies. This person directs the planning and implementation of enterprise cybersecurity measures and practices on IT infrastructure, systems, data, application development, and business operations while overseeing the development of policies and procedures to safeguard the organization's sensitive information. This position reports to the CISO.
Key Areas of Responsibility- Directing the successful execution of the multiyear Cyber Roadmap
- Administer the information security function's strategy, operations, and budget.
- Partnering with key leaders across the organization to advance the goals of the business and Cyber Security Function
Critical and Essential Tasks- Develops strategic and tactical roadmaps to strengthen information and cyber security technologies, services, policies, standards, and procedures to implement effective risk mitigation strategies and controls.
- Conduct regular security assessments and audits to identify potential security risks and vulnerabilities and develop mitigation strategies.
- Collaborate with IT Leadership, executive management, and other stakeholders to ensure alignment of security initiatives with business goals and objectives.
- Collaborate with the IT teams and other stakeholders to develop and maintain a robust enterprise incident response plan.
- Design and implement a robust security architecture for IT systems, networks, and applications, incorporating the latest security technologies and methodologies.
- Lead and actively manage security-related projects such as assessments, audits, penetration tests, and remediation efforts. Contribute to IT infrastructure projects and activities that are tangential to information and cyber security.
- Develop, implement, and update the enterprise security policies, standards, and procedures, as well as other cyber security-related policies, including those pertaining to systems access, authentication, acceptable use, and the use of artificial intelligence.
- Oversee the monitoring, analysis, and mitigation of security incidents/breaches and resulting impact to the business.
- Collaborate with system owners and administrators to ensure that new or updated solutions and services comply with the enterprise cyber security standards.
- Oversee security assessments, audits, penetration testing and vulnerability scans to identify vulnerabilities/risks and ensure ongoing security improvement.
- Evaluate third-party vendors and service providers for security compliance and ensure that security requirements are met in vendor contracts.
- Develop security training and awareness programs in conjunction with the IT Compliance Teams for employees, promoting a culture of security awareness and compliance across the enterprise.
- Define Cyber Security KPIs and risk indicators and prepare regular updates
- Stay updated on current and emerging security technologies, trends, and threats. Integrate relevant/appropriate leading security technologies and practices into the enterprise's security architecture.
- Lead and manage the information security team, including hiring, training, and performance management.
- Develop and manage the information security budget to ensure that resources are allocated effectively to address security needs.
RequirementsExperience10+ years of experience in a leadership role in the areas of IT security, risk, and compliance
EducationSecurity certification (CISSP) and Audit training preferred
