Senior Director - Information Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Director - Information Security based in the United States. This senior leadership role oversees the development and execution of enterprise-wide information security programs across a complex organization. You’ll serve as a strategic advisor to executive leadership, helping shape security strategy, reduce organizational risk, and protect critical systems and data. The role spans security governance, risk management, incident response, cloud security, third-party risk, and secure software development. You’ll work closely with business and technology leaders to embed security into enterprise processes and strategic initiatives. The position also provides expert guidance on regulatory assessments, security audits, contract requirements, and federal, state, and commercial proposals. Success requires strong executive communication, deep security expertise, independent judgment, and the ability to lead cross-functional initiatives. This is a high-impact opportunity to influence security strategy and strengthen resilience across a distributed, enterprise-level environment. Accountabilities - Act as a delegate and representative of the Corporate Security Officer, supporting executive initiatives and enterprise information security strategy. - Develop, maintain, and continuously improve enterprise security policies, standards, procedures, and incident response plans in alignment with industry best practices and applicable compliance requirements. - Lead enterprise-wide security initiatives, including risk assessments, incident response coordination, cloud security evaluations, and secure software development lifecycle (DevSecOps) programs. - Provide expert technical and written responses to security-related requirements within federal, state, and commercial contract proposals. - Present security posture assessments, enterprise risk summaries, recommendations, and investment justifications to senior executives and key stakeholders. - Build strong partnerships with business units and IT leadership to integrate security considerations into organizational processes, technology initiatives, and strategic decisions.

- Oversee supply chain and third-party vendor risk management programs, ensuring vendors and partners align with enterprise security objectives. - Coordinate and facilitate internal and external security audits, enterprise risk assessments, and regulatory compliance reviews. - Identify emerging security risks and opportunities for strengthening organizational controls, resilience, and compliance. - Operate independently within broad organizational policies and practices, escalating complex issues when clarification of established procedures or policies is required. Requirements - Master’s degree required; relevant experience may be considered where permitted by the organization. - 15+ years of professional experience in information security, cybersecurity, risk management, or a closely related field. - CISSP or an equivalent information security certification required. - CISM certification preferred. - Certified Cloud Security Professional (CCSP) certification preferred. - GIAC Security Leadership Certification (GSLC) preferred. - Extensive experience developing and executing enterprise information security strategies, programs, policies, and governance frameworks. - Strong knowledge of security risk management, regulatory compliance, incident response, cloud security, DevSecOps, and third-party/vendor risk. - Demonstrated ability to lead complex, cross-functional security initiatives involving business and technology stakeholders. - Strong executive communication skills, with the ability to translate complex security risks and technical concepts into clear, actionable recommendations.