What are the responsibilities and job description for the Director of Cyber Security position at DeWinter Group?
Director of Cyber Security
This role is with a DeWinter Financial Technology Partner
Location: Onsite role in NYC 4x per week.
We are seeking a dynamic and highly experienced Head of Security to lead our security initiatives and ensure robust protection of our internal and external systems. This is a highly hands-on leadership role where you will set the strategic vision for security while directly contributing to the implementation and maintenance of security measures. You will manage a small but talented team to safeguard our infrastructure, applications, and cloud environments.
To succeed in this role, you must have a strong background in application, network, and cloud security, combined with excellent leadership, communication, and problem-solving skills. As the Head of Security, you will work closely with other teams across the organization to align security initiatives with business objectives.
Core Responsibilities
- Strategic Leadership: Develop and execute the company’s security strategy, ensuring alignment with business goals and regulatory requirements.
- Team Management: Lead, mentor, and grow a small team of security professionals, fostering a collaborative and high-performance culture.
- Hands-On Implementation: Actively participate in the design, deployment, and management of security programs and controls across application, network, and cloud environments.
- Risk Assessment: Identify, evaluate, and mitigate security risks, implementing proactive measures to prevent breaches.
- Incident Response: Lead the response to security incidents, ensuring timely resolution and post-incident analysis to improve future resilience.
- Policy and Compliance: Establish and enforce security policies and standards, ensuring compliance with relevant regulations and industry best practices.
- Collaboration: Work closely with engineering, IT, product and compliance teams to embed security into the development lifecycle and operational processes.
- Continuous Improvement: Stay up-to-date on the latest security threats, trends, and technologies, and ensure the organization’s defenses and capabilities evolve accordingly.
Desired Experience
- A degree in computer science, cybersecurity, IT, or a related field.
- 5 years of hands-on experience in cybersecurity, including leadership roles.
- Expertise in application security, cloud security, and network security.
- Proficiency with security tools and frameworks such as SAST, DAST, SIEM, IDS/IPS, and endpoint protection.
- Experience with infrastructure as code (IaC) tools like Terraform or Bicep.
- Knowledge of Python, Java, React
- Strong understanding of regulatory requirements and industry standards
- Proven ability to manage security incidents and perform root cause analysis.