Senior Cybersecurity Operations and Defense Director

CRC Group is a leading, independent pure-play brokerage and underwriting specialty insurance distributor. Our culture puts people first, prioritizing long-term relationships, ethical decision-making, and continuous improvement. As a result of listening to our employees, CRC Group earned a Top Workplaces USA award three years in a row based solely on employee feedback and CRC Group is currently Great Place To Work Certified! If you want to work for a company where employees are valued and growth is encouraged, CRC Group could be the place.

The following information aims to provide potential candidates with a better understanding of the requirements for this role.

The Senior Cybersecurity Operations and Defense Director provides strategic leadership for organizational information security programs, including governance, risk management, cyber defense, and protection of enterprise assets. This role ensures resilience against threats, establishes security frameworks, and oversees compliance with regulatory and industry standards while leading cross-functional teams to implement and maintain robust defense capabilities.

Location: This position is located in our corporate HQ in Charlotte, NC.

KEY RESPONSIBILITIES:

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Develop and execute enterprise-wide information security strategy aligned with organizational objectives.
• Oversee governance, risk, and compliance initiatives to ensure adherence to legal, regulatory, and internal standards.
• Lead development and implementation of security policies, standards, and guidelines across the organization.
• Direct vulnerability management, incident response, and threat detection operations to safeguard assets.
• Oversee AI enablement for Cyber Operations
• Partner with executive leadership, legal, and IT teams to manage security risks and maintain business continuity.
• Drive enterprise security awareness programs and influence adoption of best practices.
• Lead, mentor, and manage senior-level security professionals and cross-functional security initiatives.
• Develop security budgets, resource plans, and ensure ROI from security investments.

EDUCATION AND EXPERIENCE

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• Master’s degree in Cybersecurity, Information Assurance, or related discipline preferred.
• 12+ years of experience in information security or IT risk management roles.
• 7+ years of experience in leadership roles directing enterprise security functions.
• 3-5 years of experience in AI enablement for security operations, i.e. integration of AI security operations, automation, auto-triage; experience Security Copilot, Claude and/or ChatGPT
• Experience developing and implementing cybersecurity strategies and frameworks.
• Proven track record in incident response, security architecture, threat management, and compliance.

CERTIFICATIONS / LICENSES / REGISTRATIONS

• Certified Information Systems Security Professional (CISSP) preferred.
• Certified Information Security Manager (CISM) is desirable.
• Certified Information Systems Auditor (CISA) or equivalent risk/compliance certification preferred.

FUNCTIONAL SKILLS

• Strategic thinking and vision setting for cybersecurity programs.
• Advanced knowledge of security architecture, threat intelligence, and vulnerability management.
• Strong leadership and team development skills.
• Expertise in regulatory compliance frameworks such as NIST, ISO 27001, and SOC standards.
• Ability to influence executives and communicate complex security concepts effectively. xhqgsiq

Proficiency in risk management and business continuity planning.