The Senior Director of Security is a transformational leader responsible for crafting information security strategy and ensuring the execution and oversight of services, policies, standards, and solutions. This role is pivotal in maintaining an enterprise-wide security program aimed at protecting the organization's information, assets, and personnel. The incumbent will devise and uphold policies, procedures, standards, and guidelines to safeguard the confidentiality, integrity, and availability of data. Additionally, they will manage a team in identifying threats and vulnerabilities, developing risk mitigation plans, and implementing controls to strengthen systems.

Key Responsibilities:

• Establish and maintain a robust cybersecurity governance framework aligned with industry best practices and regulatory requirements, ensuring effective oversight of cybersecurity risks and compliance obligations.
• Identify, evaluate, and prioritize cybersecurity risks and vulnerabilities across the organization, implementing risk mitigation plans to minimize the impact of potential security incidents.
• Oversee the organization's vulnerability management program, including identifying, assessing, prioritizing, and remediating security vulnerabilities in systems and applications. Implement effective processes and tools for vulnerability scanning, assessment, and tracking.
• Supervise dynamic testing tools and techniques, coordinating regular security testing with internal and external stakeholders to maintain effective security controls. Additionally, evaluate and recommend new security tools and technologies to enhance the organization's security posture.
• Collaborate with key stakeholders to integrate security practices into business processes and decision-making, championing the development of an enterprise security awareness culture to drive behavioral changes. Provide strategic guidance and direction to executive leadership on cybersecurity matters, risk mitigation strategies, and emerging threats.
• Build and lead a team of experts, establishing and maintaining standards, policies, procedures, and specifications to promote systems' security and uninterrupted operation.
• Drive the development of a long-term strategic roadmap for information security.
• Develop appropriate information security and risk management metrics and key performance indicators, providing regular reports to the CTO and other members of the executive team.
• Supervise Onbe's technical and physical security controls, including access control systems, video surveillance systems, and alarm panels.

Core Qualifications

• Bachelor’s Degree in computer science, Information Systems, Business, Project Management.
• CISSP, CISM, or similar.
• 5 years in a security leadership role.
• 12 years working in a security-focused role in technology.
• PCI, SOC2, and ISO controls and frameworks.
• Azure experience
• Experience working with a Security Operations Center (SOC).
• Functional knowledge in all areas of cybersecurity.