Job DescriptionThis role can be based remotely in the United States. The Director of Enterprise Security leads the organization's information security function and owns two core areas of responsibility. The first is directing the operations of the organization's security solutions through direct leadership of the Information Security team, including hiring, development, and performance management of security analysts and staff. The second is driving the enterprise security strategy through policy, architecture, and training programs, and translating that strategy into enterprise-wide priorities, standards, and budget. The Director helps own the selection and evaluation of security solutions, oversight of vulnerability audits and assessments, and management of security vendor relationships and spend. The Director of Enterprise Security partners with leaders across the organization, representing Information Security in cross-functional decision-making, shaping the corporate security vision, and building organization-wide engagement in achieving higher levels of enterprise security.
ESSENTIAL DUTIES AND RESPONSIBILITIES - Lead execution of the organization's security strategy, including the security architecture design, security awareness training program, security documents (policies, standards, baselines, guidelines, and procedures), Third Party Risk Program and Disaster Recovery Plan, where appropriate.
- Lead the Information Security team, including hiring, coaching, performance management, and succession planning for security analysts and staff.
- Along with CISO, support development of a multi-year cybersecurity strategy and maturity roadmap aligned with business growth objectives, technology modernization initiatives, and emerging threats.
- Maintain up-to-date knowledge of the Information Security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
- Help build the business case for security investments; select and acquire additional security solutions or enhancements to existing security solutions to improve overall enterprise security as per the enterprise's existing procurement processes. Oversee the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise's security documents specifically.
- Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers and other systems and in databases and other data repositories. Ensure the enforcement of enterprise security policies and report on the organization's security and risk posture to senior leadership and, as appropriate, the executive team.
- Help drive the organization's AI governance and security program, including policies and controls for the secure and responsible use of AI tools and models, oversight of AI-related risk (e.g., data leakage, model abuse, third-party AI vendor risk), and partnership with legal, privacy, and business stakeholders on responsible AI adoption.
- Direct all investigations into problematic activity and own on-going communication with management, and direct the design and execution of vulnerability assessments, penetration tests and security audits.
- Serve as the executive sponsor for the security awareness training program to ensure consistently high levels of compliance with enterprise security policies and drive ongoing communications with various business groups to ensure enterprise-wide understanding of security goals, to solicit feedback and to foster co-operation.
- Own 3rd party relationships (MSSPs, etc.), including contract negotiation and strategic vendor management.
- Represent enterprise with business unit leaders, shaping the corporate security vision and securing their engagement in achieving enterprise security goals and corporate risk mitigation plans
- Perform any other related duties as required or assigned.
Required SkillsSOFTWARE SKILLS REQUIRED Advanced: Database
Basic: Required ExperienceREQUIRED EDUCATION Four year college degree preferred, or equivalent experience resulting in broad knowledge of a field related to the job, such as information security, computer science, or business administration; a degree is not required where a candidate has strong, demonstrated relevant experience
REQUIRED EXPERIENCE - 7-10 years related experience and/or training, including at least 3 years leading or managing a security team.
- Extensive experience in enterprise security architecture design and enterprise security document creation.
- Proven experience directly leading and managing a security team, including hiring, coaching, and performance management.
- Strong knowledge of the Microsoft security stack (e.g., Microsoft Entra ID, Defender, Sentinel, Purview) and Windows/enterprise network environments.
- Hands-on cloud security experience across AWS and Azure, including securing cloud-native applications and infrastructure (e.g., containers, serverless, IAM, and cloud workload protection).
- Experience developing AI governance and security programs, including policies for secure and responsible AI use and management of AI-related risk.
- Experience in designing and delivering employee security awareness training.
- Experience in developing Business Continuity Plans and Disaster Recovery Plans.
Experience leading incident response and management for security events, including detection, containment, root-cause analysis, and post-incident reporting to leadership.
PREFERRED CERTIFICATES, LICENSES, REGISTRATIONS - GIAC Security Essentials Certification
- GIAC Security Leadership Certification
- ISACA Certified Information Security Manager
Compensation and BenefitsAs a testament to our commitment to diversity, equity, inclusion, and belonging, and in alignment with our commitment to fair and transparent compensation, our salary bands are transparent both internally and as a part of our external recruitment process. The targets for this role are dependent on market/ geographic location and range from $140,000 to $195,000 USD.
At Graebel, where we truly value the exceptional contributions of our dedicated team-yes, that means YOU-we've crafted a benefits package with your success in mind. Enjoy a comprehensive benefits package including a 401(k) plan, top notch health insurance (covering medical, dental, and vision), and find support through our Employee Assistance Program. Enjoy well-earned breaks with paid time off that grows with your years of service to the company, paid holidays each year, and volunteer paid time off! Secure your future with life insurance and disability coverage. Join us to elevate your work life experience!
