Director, Cyber Security

Director, Cyber Security

The Director of Cyber Security will lead our information security function, managing a cybersecurity team and overseeing the implementation of frameworks, threat response, and security controls across the enterprise. This leadership role requires a strategic thinker with strong technical experience, hands-on expertise in penetration testing, red/blue/purple team methodologies, and direct experience engaging with executive leadership. The role will require a mix of strategic planning, risk assessment, incident response, and team management.

Key responsibilities include:

• Leading and managing a team of cybersecurity engineers.
• Performing threat prioritization, incident response, and forensic analysis.
• Overseeing penetration testing and red/blue/purple team operations.
• Designing, developing, and implementing IT security policies and standards.
• Collaborating cross-functionally to ensure secure design and execution of projects.
• Managing security platforms (SIEM, EDR, etc.) and ensuring proper threat alerting, management, and remediation.
• Performing security audits and creating/executing remediation plans.
• Presenting risk analysis and mitigation strategies to executive leadership.
• Conducting regular reviews of CVEs and assessing internal system exposure.
• Evaluating and adopting modern frameworks and security practices.

Required qualifications include:

• Minimum 6+ years of cybersecurity experience, ideally in technology or manufacturing.
• At least 3+ years of direct people management experience.
• Strong understanding of cybersecurity frameworks and best practices.
• Bachelor's or Master's Degree in Cybersecurity or a related field.
• Penetration testing experience is mandatory.
• Red, blue, or purple team experience.
• Proven ability to lead security initiatives in a corporate environment.
• Demonstrated experience engaging with senior leadership.
• Strong communication, presentation, and collaboration skills.
• Relevant certifications such as CISSP, CISA, or CEH are required.

Technical skills include:

• Risk & business impact analysis
• SIEM / EDR / Vulnerability management tools
• Penetration testing tools and frameworks
• Incident response & forensic investigation
• Framework mapping and compliance strategy (NIST, ISO, etc.)
• Network security, system hardening, and access control
• Security operations in hybrid cloud environments
• Change management processes

Ideal candidate profile:

• 710 years in cybersecurity with at least 3+ years in a leadership role
• Experience in a fast-paced tech, fintech, or startup environment preferred
• Hands-on experience in purple team operations and forensic investigations
• Track record of successfully managing security operations at enterprise scale
• Motivated, adaptable, and capable of working in cross-functional teams