Director of Information Security & Strategic Resilience
J
JobgetherInformation security
US; based in the United States; remote US-based roleFull-TimeDirector
SalaryCompetitive annual salary of $135,000–$140,000, depending on experience and qualifications.
Apply NowOpens the employer's application page
Job Details
- Experience
- 15+ years of experience in information security
- Required Skills
- Microsoft Azure
Requirements
- Have 15+ years of information security experience with progressive responsibility in enterprise or cloud-first environments.
- Demonstrate leadership in strategic planning and hands-on security operations.
- Have strong familiarity with Azure, Microsoft 365, Defender, SharePoint, and Intune.
- Have experience with secrets management solutions such as HashiCorp Vault or equivalent, encryption, and key management.
- Bring hands-on experience with incident response, SIEM, EDR, data loss prevention, vulnerability management, and penetration testing.
- Have working knowledge of secure software development, enterprise application security, cloud security architecture, and secure integrations.
- Understand FAIR risk analysis, threat modeling, security assessments, and risk-based remediation.
- Have experience collaborating with MSSPs, vendors, and external security partners.
- Communicate technical and risk-related topics clearly to executives and boards.
- Balance security controls with usability, innovation, and organizational objectives.
Responsibilities
- Develop and execute a multi-year cybersecurity and resilience roadmap aligned with organizational priorities.
- Establish a risk-based security program using frameworks including CIS Critical Security Controls, NIST CSF, NIST 800-53, SANS, and FAIR.
- Create and improve enterprise security policies, standards, and procedures, and support audits and compliance obligations.
- Oversee security assessments and risk management for vendors, SaaS platforms, cloud providers, and external partners.
- Provide security architecture guidance across Azure, Microsoft 365, Defender, Purview, Intune, enterprise SaaS, portals, and custom applications.
- Define practices for encryption, key management, tokenization, certificate lifecycle management, and secrets protection.
- Lead vulnerability management, threat modeling, penetration testing, and remediation prioritization.
- Mature EDR, SIEM, and cloud-native security capabilities, coordinating with managed security service providers.
- Own incident response planning, tabletop exercises, business continuity planning, and post-incident reviews.
- Advise the CIO, board, and senior leaders through cybersecurity updates, risk reporting, and investment recommendations.
View Full Description & ApplyYou'll be redirected to the employer's site
