Job DescriptionProvides senior-level leadership for cybersecurity strategy, operations, programs, and team activities to protect the organization's information assets, systems, and data from cyber threats. Oversees cybersecurity risk management, incident response, vulnerability management, security awareness, policy execution, security technology administration, and continuous improvement of the organization's security posture. Partners with IT leadership, business leaders, vendors, and internal stakeholders to align cybersecurity priorities with enterprise objectives, strengthen controls, support privacy and compliance requirements, and enable secure business operations.
- Provide senior-level leadership, direction, coordination, and oversight for cybersecurity programs, tools, processes, and team activities across the organization.
- Lead the development and execution of cybersecurity plans, standards, procedures, and priorities to protect systems, data, networks, and business operations while aligning department objectives with organizational goals
- Oversee cybersecurity risk identification, assessment, and mitigation activities, including vulnerability management, security control reviews, remediation tracking, and escalation of material risks to appropriate leadership
- Direct cybersecurity incident response activities, including escalation, investigation coordination, containment, recovery support, executive communication, documentation, and lessons learned.
- Evaluate emerging threats, risks, vulnerabilities, regulatory expectations, and cybersecurity trends and sponsor practical improvements to reduce business risk and strengthen the organization's security posture.
- Set direction for cybersecurity awareness, training, and communication activities to promote secure practices, improve risk awareness, and strengthen cybersecurity culture throughout the organization.
- Oversee cybersecurity projects, vendor activities, managed security service providers, and security tool investments to ensure work is delivered effectively, securely, and in alignment with business priorities and approved budgets.
- Build, coach, and develop a high-performing cybersecurity team by setting strategic and operational priorities, providing feedback, supporting professional development, and ensuring effective collaboration with IT and business partners.
Qualifications- Minimum - Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field. Relevant cybersecurity certifications such as CISSP, CISM, CRISC, Security Plus, or equivalent are preferred
- 10 or more years of progressive experience in cybersecurity, information security, infrastructure security, risk management, or related IT disciplines. Prior people leadership, strategic program leadership, vendor management, incident response, vulnerability management, security operations, and cross-functional leadership experience preferred.
- Knowledge - Advanced knowledge of cybersecurity operations, security frameworks, enterprise risk management practices, incident response, vulnerability management, identity and access controls, data protection, privacy requirements, regulatory expectations, and security technologies used to protect enterprise systems and information.
- Skills - Skilled at setting cybersecurity direction, prioritizing enterprise risks, translating technical risk into business terms, and influencing IT, business, legal, audit, and vendor stakeholders. Strong interpersonal skills to include effective oral and written communication, relationship building, conflict management, and vendor negotiation. Skilled at coaching, developing, and motivating cybersecurity and technical talent.
- Abilities - Defines complex problems, gathers and analyzes security information, evaluates enterprise risk, and recommends practical solutions that balance protection, compliance, cost, operational impact, and business objectives. Builds trust, cooperation, and accountability among cybersecurity team members and cross-functional partners while maintaining appropriate urgency and confidentiality.
- Supervisory Scope - Reports to Director level; direct reports = yes; indirect reports = yes
- Financial Scope - Responsible for managing assigned cybersecurity operating expenses, project costs, vendor services, managed security service providers, and security tool investments within approved budget parameters while providing input into future budget planning and resource prioritization.
The base pay range for this position is $142,000 to $199,000 annually. Actual compensation will be determined based on experience, qualifications, and other job-related factors permitted by law. This pay range represents the anticipated salary for this position at this time.
What We Offer
At Wells, we're proud to support our employees with comprehensive benefits that enhance health, financial wellness, and include paid time off (PTO). Eligible employees may also receive an annual incentive bonus based on Company performance. Learn more about our benefits here.
