Summary of Responsibilities:
We are seeking a Director, Security & Response to lead an integrated enterprise security function spanning cybersecurity, physical security, threat intelligence, incident response and organizational resilience. This is an opportunity for an accomplished security leader to protect ATC today while shaping how we prepare for tomorrow.
Leadership Scope
Reporting to the EVP, Chief Systems Officer, you will lead a significant enterprise function and unite cybersecurity, physical security and organizational resilience into a cohesive strategy. You will protect ATC's people, facilities, critical assets, digital infrastructure and intellectual property while strengthening regulatory compliance, business continuity and organizational confidence.
You will also serve as a trusted business partner, helping leaders understand complex risks, make informed decisions and balance security with reliability, regulatory requirements, operational priorities and user experience.
Essential Responsibilities:
What you'll lead
• Develop and execute an integrated enterprise security strategy spanning cybersecurity, physical security, threat intelligence and incident response.
• Lead threat detection, vulnerability management, data protection and response to security events.
• Oversee access control, surveillance, personnel safety and protection of critical facilities and assets.
• Establish effective cyber and physical incident protocols, escalation paths, notification requirements and recovery practices.
• Partner across Technology, Operations, Legal, Human Resources, Compliance, Audit and Risk to strengthen enterprise resilience.
• Lead security vendors and third-party providers with clear expectations for contracts, service delivery and performance.
• Develop leaders and build a high-performing organization with clear accountability and strong succession capabilities.
• Translate complex security risks into clear priorities, investment decisions and recommendations for executive and board audiences.
How you'll lead
Protect and perform. Sustain disciplined cybersecurity and physical security operations while maintaining strong incident response and threat awareness.
Build the roadmap. Translate ATC's strategies, risks and opportunities into clear, measurable security and resilience priorities.
Strengthen executive confidence. Create greater visibility into security strategy, investment decisions, priorities and performance for senior leadership and the board.
Advance the operating model. Clarify responsibilities and decision rights across Security & Response and key partner functions, including Risk and Audit.
Prepare for what's next. Establish direction for identity and access capabilities, AI-related security considerations and emerging risks while balancing protection with business needs and user experience.
Develop the organization. Build leadership capability, strengthen accountability and develop the talent and succession pipeline needed for long-term success.
What you'll bring
We are looking for an enterprise-minded security leader who combines technical credibility, disciplined judgment and the ability to connect security priorities to business outcomes.
• Progressive leadership experience in enterprise security, cybersecurity, resilience, incident response or a closely related discipline.
• Experience leading multidisciplinary teams and managers in a complex, highly regulated or operationally critical organization.
• Broad knowledge of cybersecurity operations, threat detection, vulnerability management, data protection and incident response.
• Experience with physical security, access control, surveillance, personnel safety and critical-asset protection.
• Understanding of operational technology and industrial control system risk; NERC CIP knowledge is highly relevant.
• Experience translating enterprise risk into strategic roadmaps, investment priorities, governance decisions and executive communication.
• Strong partnership experience with Technology, Operations, Legal, Human Resources, Compliance, Audit, Risk and executive leadership.
• Experience managing third-party security providers, vendors, contracts and performance expectations.
• A listening-first leadership style with the courage and decisiveness to act when risk is elevated.
• Learning agility around emerging capabilities, including artificial intelligence and identity and access management.
• A bachelor's degree in cybersecurity, information technology, engineering, risk management, business or a related discipline is expected. An advanced degree may be beneficial, and CISSP certification is a plus. Comparable combinations of education and directly relevant leadership experience will be considered.
Number of Openings Available:
0
Posting Date:
2026-11-03
Time Type:
Full time
