Director of Cybersecurity

Our client is seeking a Director of Cybersecurity to lead security operations, strengthen enterprise risk management, and build a growing internal security team. This role offers significant ownership across the cybersecurity function, from turning strategic priorities into measurable improvements to leading incident response and communicating risk to senior leadership. The ideal candidate combines deep operational experience with sound business judgment and knows how to protect an organization while supporting its goals. Candidates should bring direct accountability for security teams, decisions, and outcomes, beyond coordinating cybersecurity projects.

What You’ll Do

• Lead execution of the cybersecurity roadmap, prioritizing investments and improvements based on business risk.
• Build, mentor, and develop an internal security team.
• Oversee security operations, incident response, and ongoing improvements to security capabilities.
• Establish and strengthen policies, controls, and governance using recognized security frameworks.
• Translate technical risks into clear recommendations for executives and governance stakeholders.
• Manage external security partners, setting performance expectations and holding them accountable.
• Guide the development of internal capabilities as the security function grows.
• Own security budgets, staffing plans, and investment recommendations.
• Partner with technology, legal, and business teams on resilience, compliance, and data protection.
• Provide security oversight across cloud environments, identity and access, networks, and enterprise data.

What You Bring

• Significant progressive cybersecurity experience, including several years leading security teams.
• Demonstrated ownership of an enterprise cybersecurity function or a comparably broad security remit.
• A track record of hiring and developing security talent.
• Strong operational experience across incident response, security governance, and risk management.
• Experience applying frameworks such as NIST CSF or ISO 27001.
• The ability to explain cybersecurity priorities and tradeoffs to senior business leaders.
• Experience managing security vendors, service agreements, and budgets.
• Sufficient technical depth to evaluate security designs and guide engineering teams.
• A practical, business-focused leadership style.
• CISSP and/or CISM certification.
• A relevant bachelor’s degree or equivalent professional experience.

Additional Experience Valued

• Leading security in a complex organization with sensitive information and high reputational stakes.
• Expanding internal security capabilities while managing external service providers.
• Supporting organizational growth, acquisitions, or significant technology change.
• Improving security programs in response to assessments or evolving business requirements.