What are the responsibilities and job description for the Cybersecurity Director position at Tivella?
We are seeking a Director of Cybersecurity with deep knowledge and expertise in consulting services.
You will drive cybersecurity tactically across a very complex, global ecosystem, securing operations in a fast-evolving threat landscape and maintaining a strong cyber security baseline.
This role demands a sharp leader and team player who can align security requirements with business goals, and maintain scalable protections for AI models, multi-cloud infrastructures, and global operations.
Key Responsibilities
You will drive cybersecurity tactically across a very complex, global ecosystem, securing operations in a fast-evolving threat landscape and maintaining a strong cyber security baseline.
This role demands a sharp leader and team player who can align security requirements with business goals, and maintain scalable protections for AI models, multi-cloud infrastructures, and global operations.
Key Responsibilities
- Lead the execution of a global cybersecurity program, focusing on cloud security, AI security, and regulatory compliance.
- Enforce security governance aligned with ISO 27001, PCI-DSS, SOC 2 Type 2, CMMC L1-L3, ISO-42001
- Manage security architecture for AI platforms, cloud services (AWS, Azure, GCP), and hybrid environments.
- Partner with legal, compliance, engineering, and operations teams to maintain regulatory and contractual cybersecurity requirements worldwide.
- Collaborate in the incident response exercises, and real-world cyber event management.
- Monitor evolving threats to AI/ML models, ensuring model integrity, confidentiality, and robustness.
- Continuously improve vulnerability management, security monitoring, and DevSecOps pipelines.
- Manage cybersecurity vendors, consultants, and external auditors.
- Drive a cybersecurity culture through executive training, employee awareness programs, and global policy enforcement.
- 12 years of experience in cybersecurity, with at least 7 years in leadership roles.
- Expertise in AI security challenges (model attacks, data poisoning, adversarial ML).
- Deep experience securing cloud-native architectures (AWS, Azure, GCP).
- Hands-on knowledge of ISO 27001, PCI-DSS, SOC 2 Type 2, CMMC L1-L3, FedRamp, ISO-42001, NIST 800 53 frameworks.
- Proven experience leading global multi-region security programs.
- Strong understanding of risk management, compliance reporting, and audit processes.
- Exceptional ability to communicate complex security issues to senior executives and non-technical audiences.
- Relevant certifications are a plus (e.g., CISSP, CCSP, CISA, CISM, ISO 27001 Lead Auditor).
- Be able to work in a high stress environment, ensuring the business can move forward with all initiatives while maintaining a strong security posture.
- Previous background in consulting within IT-information services.
- Experience implementing security for AI/ML pipelines.
- Familiarity with cloud-native security tooling (e.g., CSPM, CWPP, CNAPP solutions).
- Experience with global data privacy regulations (GDPR, CCPA, etc.).
- Knowledge of emerging security standards for AI and cloud environments.
- Leadership in shaping cybersecurity at a global scale in a nimble and agile organization.
- Complex, challenging environment with real-world global impact.
- Competitive compensation and global benefits package.
- High-trust, flexible, and inclusive workplace culture.