Director of Security and Compliance

Director Of Security And Compliance

A growing, employee-owned organization is seeking an experienced Director of Security and Compliance to lead its enterprise cybersecurity function.

The ideal candidate will have 8–12+ years of progressive enterprise security, cybersecurity, or technology leadership experience, including prior Director-level leadership and experience building or scaling a security organization.

This position will oversee security strategy, operations, architecture, IAM, cloud security, GRC, incident response, vulnerability management, third-party risk, and business continuity.

Responsibilities include:

· Developing and executing the enterprise security strategy and multi-year roadmap.

· Leading cybersecurity operations, monitoring, detection, response, and recovery.

· Leading incident response for significant security events.

· Overseeing vulnerability management, endpoint protection, identity security, email security, backup resilience, and cloud security.

· Managing IAM and identity governance across Microsoft 365, Azure AD, and Google Cloud environments.

· Reviewing security architecture for new technology platforms.

· Supporting security review and governance of AI/ML and agentic systems.

· Conducting enterprise and third-party security risk assessments.

· Managing security controls related to customer, contractual, regulatory, and cyber-insurance requirements.

· Supporting physical security, facility access, and critical infrastructure protection.

· Supporting business continuity and disaster recovery planning.

· Overseeing security awareness and training.

· Owning the annual security budget and technology investment plan.

· Leading, mentoring, and developing the enterprise Security team.

Qualifications include:

· 8–12+ years of progressive cybersecurity or enterprise security experience.

· Prior Director-level or higher leadership experience required.

· 5+ years leading technical security teams and enterprise initiatives.

· Experience building or scaling a dedicated security function.

· Strong knowledge of:

o Security Operations

o IAM / Identity Governance

o EDR / XDR

o SIEM

o Network & Cloud Security

o Vulnerability Management

o Incident Response

o Security Architecture

o GRC

o Business Continuity / Disaster Recovery

· Experience with Microsoft 365, Azure, Google Cloud, and hybrid environments.

· Strong executive communication and leadership skills.

· Bachelor's degree in Cybersecurity, IT, Computer Science, Business, or related field.

· CISSP, CISM, CRISC, or similar certification preferred.

· Manufacturing, construction, industrial, or distributed operations experience preferred.

· Experience with AI/ML security governance is a plus.

· Familiarity with CrowdStrike, Druva, Barracuda, Microsoft Security, PAM, SIEM, vulnerability management, and security automation tools is a plus.

Compensation & Benefits include:

· $185,000–$213,000 Base Salary

· Employee Stock Ownership Program (ESOP)

· Discretionary Annual Bonus

· Medical, Dental & Vision Insurance

· 401(k) with Company Contributions

· Paid Time Off & Sick Time

· Paid Holidays

· Paid Parental Leave

· Tuition Reimbursement

· Employee Assistance Program

· Gym Reimbursement

This is an excellent opportunity for an experienced cybersecurity leader looking to take ownership of enterprise security strategy, operations, compliance, architecture, and team development.

To apply, submit an updated resume to View email address on click.appcast.io.

All inquiries and applications will remain confidential.

All qualified applicants will receive consideration without regard to race, age, color, sex (including pregnancy), religion, national origin, disability, sexual orientation, gender identity, marital status, military status, genetic information, or any other status protected by applicable laws or regulations. GPAC (Growing People and Companies) is an award-winning search firm specializing in placing quality professionals within multiple industries across the United States since 1990. We are extremely competitive, client-focused and realize that our value is in our ability to deliver the right solutions at the right time.