Director, Cyber Security

We will be accepting applications through September 20, 2026 or until filled.--- --- ---Position SummaryThe Director of Cybersecurity is responsible for leading the enterprise's cybersecurity operations, incident response, and governance, risk, and compliance (GRC) programs. This role serves as a key member of the security leadership team, translating strategic security objectives into operational programs that protect the organization's information assets, infrastructure, and reputation. The Director will oversee a team of security professionals, manage the organization's security posture across threat detection, incident response, vulnerability management, and regulatory compliance, and serve as a trusted advisor to executive leadership on cyber risk.Key ResponsibilitiesIncident Response & Security OperationsOwn and continuously mature the enterprise incident response (IR) program, including playbooks, tabletop exercises, and post-incident reviewsServe as incident commander for high-severity security incidents, coordinating cross-functional response efforts (Legal, Communications, IT, executive leadership)Oversee Security Operations Center (SOC) functions, including threat detection, triage, containment, and remediationManage relationships with third-party incident response, digital forensics, and managed detection and response (MDR) providersLead root cause analysis and drive remediation of systemic vulnerabilities exposed by incidentsEstablish and report on key incident metrics (MTTD, MTTR, containment time) to leadership and the boardGovernance, Risk & Compliance (GRC)Build and maintain the enterprise cybersecurity risk management framework, including risk registers, risk scoring methodologies, and treatment plansLead compliance efforts against applicable frameworks and regulations (e.g., NIST CSF/800-53, ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR, FedRAMP, as applicable to the industry)Manage internal and external audit engagements, including evidence collection, remediation tracking, and auditor liaisonDevelop, implement, and maintain security policies, standards, and proceduresOversee third-party/vendor risk management program, including security assessments and contract reviewPartner with Legal and Privacy teams on regulatory obligations, breach notification requirements, and data protection mattersPresent risk posture, compliance status, and program maturity to executive leadership, audit committee, and board of directors as neededTechnical Security LeadershipDirect vulnerability management program, including scanning, penetration testing coordination, and patch prioritizationOversee identity and access management (IAM), endpoint detection and response (EDR), network security, and cloud security architecture in partnership with IT/engineering teamsGuide security architecture reviews for new systems, applications, and vendor integrationsChampion security awareness training and phishing simulation programsEvaluate and recommend security tooling, technologies, and process improvementsMaintain threat intelligence awareness and translate emerging threats into actionable defensive measuresLeadership & Program ManagementBuild, mentor, and manage a high-performing cybersecurity team, including hiring, performance management, and professional developmentDevelop and manage departmental budget, including tooling, staffing, and professional servicesDefine and track KPIs/metrics demonstrating program effectiveness and maturityPartner cross-functionally with IT, Legal, Privacy, Internal Audit, and business unit leaders to embed security into organizational processesSupport the CISO in developing and executing the enterprise security strategy and roadmapMinimum Qualifications10+ years of progressive experience in cybersecurity, information security, or IT risk management, including demonstrated experience in incident response and GRC5+ years of people management or team leadership experienceBachelor's degree in Computer Science, Information Security, or related field, or equivalent experienceDemonstrated experience building or maturing incident response programs and leading response to significant security eventsStrong working knowledge of regulatory and compliance frameworks (NIST, ISO 27001, SOC 2, PCI DSS, and/or industry-specific regulations)Hands-on familiarity with security technologies: SIEM, EDR/XDR, vulnerability management platforms, IAM, cloud security posture management (CSPM)Experience managing third-party risk assessments and vendor security reviewsExcellent written and verbal communication skills, including experience presenting to executive leadership and boardsProven ability to manage competing priorities in a fast-paced, evolving threat landscapePreferred QualificationsMaster's degree (MBA, MS in Cybersecurity/Information Assurance, or related)Relevant industry certifications: CISSP, CISM, CRISC, CISA, GCIH, GCFA, or equivalentExperience in [industry-specific: aviation, financial services, healthcare, government contracting, etc.]Experience with cloud security across AWS, Azure, and/or GCPFamiliarity with privacy regulations (GDPR, CCPA) and their intersection with security programsExperience supporting SEC cybersecurity disclosure requirements (for public companies)Core CompetenciesCompetencyDescriptionIncident CommandAbility to lead cross-functional response under pressure with clear decision-makingRisk-Based ThinkingTranslates technical risk into business impact for non-technical stakeholdersRegulatory FluencyDeep understanding of applicable compliance obligations and audit processesTechnical CredibilitySufficient depth to guide architecture and tooling decisions with engineering teamsExecutive CommunicationComfortable briefing C-suite, audit committee, and board-level audiencesPeople LeadershipBuilds, retains, and develops security talentPhysical/Work RequirementsAbility to participate in on-call rotation for incident response as neededOccasional travel for audits, conferences, or cross-site coordination (typically <15%)Equal Pay Disclosure(s)Base Pay:180,000.00 - 225,000.00 USD AnnualTarget Annual Short-Term Incentive:Bonus Plan at 20% (% of Annualized Base Pay)Eligible for Incentive Stock Program:YesBenefits:Gogo offers competitive benefits including medical, dental and vision coverage with plans that can fit each employee’s needs. We offer an immediate vesting 401k plan, paid time off and volunteer time off. Employees have the option to participate in an Employee Stock Purchase Plan. Visit the Careers page on our website for more information at .--- --- ---Gogo is an Equal Opportunity and Affirmative Action employer, working in compliance with both federal and state laws. We are committed to the concept of Equal Employment opportunity.Qualified candidates will be considered for employment regardless of race, color, religion, age, sex, national origin, marital status, medical condition, or disability.  The EEO is the law and is available here. Gogo participates in E-Verify (English and Spanish). Right to Work Statement (English and Spanish).SummaryLocation: Broomfield, CO United StatesType: Full time