Director of Information Security

Role Overview

• Oversee a lean team of analysts and engineers
• Reporting into the VP of IT, you will have the opportunity to impact the trajectory of our IT delivery
• Conduct on-site risk assessments and provide recommendations for remediation to business leaders and stakeholders for both Ultraviolet Cyber and our customers
• Develop and maintain relationships with key business partners, including IT, Risk Management, and Compliance functions
• Collaborate with field teams to identify and mitigate security risks associated with new initiatives or projects at Ultraviolet Cyber customers
• Develop, implement, and maintain comprehensive cybersecurity strategies and programs aligned with organizational goals and objectives
• Provide strategic guidance on cybersecurity risk management and mitigation, including incident response and crisis management
• Lead the development and maintenance of policies, standards, and procedures for a comprehensive information security, compliance, and IT risk management program
• Drive cybersecurity as an enabler and value-add to the company’s core business functions
• Develop and maintain a deep understanding of both technical and business aspects of cybersecurity to provide effective guidance to customers, field teams, and senior leadership
• Collaborate with other functions, including IT, Risk Management, and Compliance, to ensure that cybersecurity is integrated into all aspects of the organization
• Oversee the establishment and maintenance of a comprehensive cybersecurity incident response plan and a disaster recovery plan.
• Manage and oversee the effective deployment of security technologies and software.
• Develop and manage security strategies for vendor selection and evaluation and monitor and manage the security aspects of the vendor lifecycle
• Communicate with stakeholders about the cybersecurity posture and strategies clearly and effectively
• Prepare and/or present cybersecurity reports for the Board of Directors and other stakeholders

Requirements

• Education: Bachelor's degree in Computer Science, Cybersecurity, or related field; advanced degrees preferred Experience:
• 10-15 years of cybersecurity experience
• At least 1 year of prior Sr Manager/Director experience (or equivalent role)
• Proven track record of leading high-performing teams and driving business outcomes through effective risk management and mitigation
• Demonstrated experience working with and supporting both internal stakeholders and customer/client stakeholders at all levels from direct contributor to executive leadership Skills:
• Strong understanding of technical and business aspects of cybersecurity, including cloud security, threat intelligence, and incident response
• Excellent communication and interpersonal skills to effectively engage on complex security topics with both technical and non-technical stakeholders, including presenting to large audiences
• Experienced in interacting and influencing key security stakeholders (VP+ and CISO/CIO/CTO level) in large Enterprise organizations
• Ability to think strategically and make informed decisions in a rapidly evolving threat landscape Technical Skills:
• Deep expertise with Microsoft Entra ID and Microsoft 365 including identity protection, conditional access, MFA, and hardening/secure baseline configurations
• Experience with endpoint detection and response tools, particularly SentinelOne, including policy tuning and noise reduction as well as incident response and containment
• Strong knowledge and experience with cloud (IaaS, PaaS, and SaaS) security architectures, strategies, and operations with particular emphasis on AWS and GCP Preferred Qualifications: Certifications: CISSP, CISM, or CEH certification; other relevant certifications preferred
• Experience with cloud security platforms and tools
• Experience leading cross-functional teams and implementing large-scale cybersecurity initiatives
• Experience leading security initiatives in a global organization with multi-national operations including management of regional information security and data protection requirements
• Experience leading security operations in an environment with MSSP-provided offensive and defensive security services

Tech Stack

• AWS
• Cloud
• Cyber Security
• Google Cloud Platform

Benefits

• Competitive salary and performance-based incentives
• Flexible working hours and remote-first culture
• Career growth opportunities in a rapidly expanding company
• Exposure to enterprise-level finance and payroll operations
• Supportive team culture with a focus on excellence and collaboration
• 401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed
• Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment)
• Group Term Life, Short-Term Disability, Long-Term Disability
• Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness
• Participation in the Discretionary Time Off (DTO) Program
• 11 Paid Holidays Annually