Director of Cyber Security

Ziply Fiber is a local internet service provider dedicated to elevating the connected lives of the communities we serve. We offer the fastest home internet in the nation, a refreshingly great customer experience, and affordable plans that put customers in charge.

As our state-of-the-art fiber network expands, so does our need for team members who can help us grow and realize our goals.

Our Company Values:

• Genuinely Caring: We treat customers and colleagues like neighbors, with empathy and full attention.
• Empowering You: We help customers choose what is best for them, and we support employees in implementing new ideas and solutions.
• Innovation and Improvement: We constantly seek ways to improve how we serve customers and each other.
• Earning Your Trust: We build trust through clear, honest, human communication.

Job Summary

The Director of Cyber Security is a senior technology leader responsible for defining and executing an enterprise cybersecurity strategy and multi-year roadmap that protects digital assets, systems, and sensitive information.

This role provides strategic direction and operational oversight of cybersecurity, ensuring alignment with business priorities, regulatory requirements, and risk tolerance. The Director partners with VP-level leadership and cross-functional teams to embed security into the organization while enabling growth.

The ideal candidate brings deep cybersecurity expertise, executive presence, and a proven ability to lead teams, influence stakeholders, and drive measurable improvements in security maturity.

Essential Duties and Responsibilities:

The Essential Duties and Responsibilities listed below are a range of duties performed by the employee and not intended to reflect all duties performed.

• Build, lead, and scale a high-performing cybersecurity organization.
• Establish priorities, operating models, and accountability for consistent results.
• Foster a culture of continuous learning and technical excellence.
• Drive succession planning and long-term talent strategy.
• Partner with executive leadership and HR to attract and retain top talent.

Cybersecurity Strategy, Governance & Program Management

• Own and evolve the enterprise cybersecurity strategy aligned to business objectives.
• Develop KPIs and metrics to measure effectiveness and risk reduction.
• Advise leadership on cybersecurity risks and business impact.
• Oversee development of policies, standards, and frameworks aligned to best practices.
• Manage cybersecurity budgeting, forecasting, and investment priorities.
• Optimize investments while maintaining strong protection and scalability.

Risk Management, Compliance & Third-Party Security

• Oversee enterprise-wide cyber risk management and mitigation strategies.
• Ensure enforcement of security controls across infrastructure, cloud, and applications.
• Lead third-party risk management, including vendor security reviews.
• Establish compliance strategy across frameworks (e.g., NIST, ISO, SOX, PCI DSS).
• Act as escalation point for high-impact risks.

Incident Response, Business Continuity & Disaster Recovery

• Oversee incident response readiness and continuous improvement.
• Provide leadership during major cybersecurity incidents.
• Drive post-incident reviews and remediation strategies.
• Partner with Technology on business continuity and disaster recovery planning.
• Ensure ongoing testing and validation of resilience capabilities.

Security Operations, Architecture & Technology Enablement

• Provide oversight of security operations (SOC, monitoring, detection, response).
• Define and drive the cybersecurity technology roadmap.
• Align security architecture with infrastructure, cloud, and application strategies.
• Enforce security standards across network, endpoint, cloud, and data systems.
• Oversee data protection strategies (encryption, DLP, secure handling).
• Manage enterprise security tools (SIEM, IDS/IPS, EDR/XDR, firewalls, VPNs).
• Ensure secure infrastructure (DNS, DHCP, identity platforms, Active Directory).
• Advance adoption of zero-trust and AI-driven threat detection.
• Ensure secure configuration across cloud (AWS, Azure, GCP), IoT, and mobile.

AI Governance & Emerging Technology Risk

• Lead AI governance for secure and responsible adoption of AI/ML.
• Oversee AI risk assessments and safeguards (model integrity, data protection).
• Align AI usage with regulatory and emerging frameworks.
• Govern secure use of generative AI and AI-enabled tooling.
• Monitor evolving AI threats and guide responsible automation.
• Deliver executive reporting on security posture and risk trends.
• Oversee cybersecurity awareness and training programs.
• Partner across Technology, Legal, HR, and Compliance to embed security.
• Influence business initiatives by integrating security early.
• Promote shared accountability for cybersecurity.

Other Duties

• Work standard Pacific Time business hours with on-call support as needed.
• Perform additional duties as required.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field (or equivalent experience).
• 15+ years of cybersecurity or related experience.
• 7+ years of leadership experience, including managing managers.
• Experience leading enterprise cybersecurity programs and influencing executives.
• Strong balance of strategic planning and operational execution.
• Experience in infrastructure security, vulnerability management, and incident response.
• Knowledge of frameworks (NIST, ISO, CIS).
• Expertise in network security, cloud security, and security tools (SIEM, IDS/IPS, EDR).
• Experience with identity management and system hardening.
• Familiarity with DevSecOps and SDLC practices.

Preferred Qualifications:

• CISM, CISSP, CEH, or similar certifications.
• Experience in telecom, ISP, or regulated industries.
• Experience leading cybersecurity transformation in high-growth environments.
• Experience presenting to executive or board-level stakeholders.

Work Authorization

Candidates must be authorized to work in the U.S. Sponsorship is not available.

Diverse Workforce / EEO

Ziply Fiber is an equal opportunity employer and considers all qualified candidates regardless of protected status.

Ziply Fiber requires a pre-employment background check and may require drug screening.