Director of Cyber Security / CISO

Director of Cyber Security / Chief Information Security Officer (CISO)

Location: Denver, CO (Hybrid | 2 Days Onsite Weekly)

About the Company

Our client is an award-winning, rapidly growing organization experiencing significant expansion across multiple business units, technologies, and markets. Through continued investment in cloud, AI, enterprise systems, and digital transformation initiatives, the company is building for the future while maintaining a highly entrepreneurial and collaborative culture.

As growth continues, they are seeking a strategic and hands-on Director of Cyber Security / CISO to lead all aspects of cybersecurity, risk management, governance, and information protection while partnering closely with executive leadership to enable business objectives.

This is a highly visible leadership position for someone who enjoys building relationships, driving security strategy, influencing key business decisions, and creating scalable security programs within a fast-paced growth environment.

Position Summary

The Director of Cyber Security / CISO will be responsible for establishing and executing the organization's cybersecurity vision, strategy, governance framework, and risk management program. This leader will work closely with executive leadership, technology teams, business stakeholders, and external partners to ensure the organization remains secure while continuing to innovate and grow.

The successful candidate will be equally comfortable discussing cyber risk with the executive team, evaluating emerging technologies such as AI, supporting cloud transformation initiatives, and partnering with operational leaders across the business.

This role requires a leader who views cybersecurity as a business enabler, not just a technology function.

Key Responsibilities

Cybersecurity Strategy & Leadership

• Develop and execute an enterprise-wide cybersecurity strategy aligned with business goals and growth objectives.
• Serve as the organization's senior cybersecurity leader and trusted advisor to executive leadership.
• Establish security roadmaps, priorities, and investment strategies to support ongoing growth and digital transformation.
• Create a security culture that balances risk management with business agility.
• Lead cybersecurity planning, budgeting, and long-term investment initiatives.

Governance, Risk & Compliance

• Design and mature cybersecurity governance, risk management, and compliance programs.
• Maintain and strengthen security frameworks, controls, and policies with a strong focus on NIST methodologies.
• Conduct enterprise risk assessments and provide executive-level reporting on cybersecurity posture.
• Ensure appropriate governance over cloud, infrastructure, operational technology, AI, and third-party vendor environments.
• Lead incident response planning, business continuity, and disaster recovery initiatives.

Technology & Security Operations

• Oversee cybersecurity operations across hybrid cloud and on-premise environments.
• Partner with internal technology teams and external managed service providers to enhance security capabilities.
• Evaluate and implement technologies that improve cyber resilience and operational effectiveness.
• Drive improvements in vulnerability management, identity and access management, endpoint security, and threat detection capabilities.
• Support modernization initiatives involving cloud infrastructure, enterprise applications, and emerging technologies.

AI, Cloud & Emerging Technologies

• Advise leadership on AI-related risks, governance, and security controls.
• Partner with technology leaders to support enterprise AI adoption and cloud transformation initiatives.
• Develop practical policies and security frameworks that allow innovation while managing risk.
• Assess emerging technologies and provide recommendations regarding cybersecurity implications.

Business Partnership & Executive Communication

• Build strong relationships across finance, operations, manufacturing, HR, and executive leadership teams.
• Develop a deep understanding of company operations and business objectives.
• Translate complex cybersecurity concepts into practical business recommendations.
• Communicate security risks, initiatives, and investment priorities to both technical and non-technical audiences.
• Serve as a key contributor in executive planning and organizational strategy discussions.

Vendor & Team Leadership

• Manage relationships with cybersecurity vendors, technology providers, consultants, and managed service partners.
• Evaluate vendor performance, negotiate contracts, and optimize technology investments.
• Lead and mentor a growing cybersecurity function while helping shape future organizational capabilities.
• Foster accountability, ownership, collaboration, and continuous improvement within the team.

Desired Experience

Required

• 10+ years of progressive experience in cybersecurity, information security, risk management, or technology leadership roles.
• Prior experience leading enterprise cybersecurity programs and security strategy.
• Strong expertise with NIST cybersecurity frameworks and security governance.
• Experience supporting hybrid cloud and on-premise technology environments.
• Strong understanding of security operations, incident response, vulnerability management, and cyber risk.
• Demonstrated success partnering with executive leadership teams.
• Experience managing third-party service providers, security vendors, and MSP relationships.
• Exceptional communication skills with the ability to simplify highly technical concepts for non-technical audiences.

Preferred

• Manufacturing, industrial, operational technology (OT), or production environment experience.
• Experience within high-growth or rapidly scaling organizations.
• Exposure to AI governance, AI risk management, and emerging technology security.
• Experience supporting AWS cloud environments.
• Familiarity with enterprise platforms such as SAP and Microsoft ecosystems.
• CISSP, CISM, CRISC, CCSP, or related certifications.

Technology Environment

Candidates should have experience working within environments that include many of the following:

• AWS Cloud
• Microsoft 365
• CrowdStrike
• Mobile Device Management (MDM)
• SAP ERP
• AI-enabled business platforms
• Enterprise HRIS systems
• Hybrid cloud architecture
• On-premise data centers
• Managed security services and outsourced operations models

What Success Looks Like

The ideal candidate is not simply a security expert but a business-minded leader who:

• Takes ownership and accountability.
• Learns the business and understands how it operates.
• Builds trusted relationships across all levels of the organization.
• Balances security requirements with operational realities.
• Brings practical solutions rather than excessive bureaucracy.
• Thrives in entrepreneurial and fast-moving environments.
• Creates executive confidence through clear communication and sound decision-making.