Director of Information Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Director - Information Security based in the United States.

• Act as a delegate and representative of the Corporate Security Officer, supporting executive initiatives and enterprise information security strategy.
• Develop, maintain, and continuously improve enterprise security policies, standards, procedures, and incident response plans in alignment with industry best practices and applicable compliance requirements.
• Lead enterprise-wide security initiatives, including risk assessments, incident response coordination, cloud security evaluations, and secure software development lifecycle (DevSecOps) programs.
• Provide expert technical and written responses to security-related requirements within federal, state, and commercial contract proposals.
• Present security posture assessments, enterprise risk summaries, recommendations, and investment justifications to senior executives and key stakeholders.
• Build strong partnerships with business units and IT leadership to integrate security considerations into organizational processes, technology initiatives, and strategic decisions.
• Oversee supply chain and third-party vendor risk management programs, ensuring vendors and partners align with enterprise security objectives.
• Coordinate and facilitate internal and external security audits, enterprise risk assessments, and regulatory compliance reviews.
• Identify emerging security risks and opportunities for strengthening organizational controls, resilience, and compliance.
• Operate independently within broad organizational policies and practices, escalating complex issues when clarification of established procedures or policies is required.

• Master’s degree required; relevant experience may be considered where permitted by the organization.
• 15+ years of professional experience in information security, cybersecurity, risk management, or a closely related field.
• CISSP or an equivalent information security certification required.
• CISM certification preferred.
• Certified Cloud Security Professional (CCSP) certification preferred.
• GIAC Security Leadership Certification (GSLC) preferred.
• Extensive experience developing and executing enterprise information security strategies, programs, policies, and governance frameworks.
• Strong knowledge of security risk management, regulatory compliance, incident response, cloud security, DevSecOps, and third-party/vendor risk.
• Demonstrated ability to lead complex, cross-functional security initiatives involving business and technology stakeholders.
• Strong executive communication skills, with the ability to translate complex security risks and technical concepts into clear, actionable recommendations.
• Experience supporting security audits, risk assessments, regulatory reviews, and contractual or proposal security requirements.
• Strong strategic thinking, analytical judgment, problem-solving, and decision-making skills.
• Ability to build trusted relationships across organizational levels and influence stakeholders without relying solely on direct authority.
• Comfortable working independently and managing broad responsibilities with limited day-to-day supervision.

• Annual salary range of $130,669–$198,029, depending on qualifications, experience, and other applicable factors.
• Remote work arrangement, with the position listed as home-based in the United States.
• Opportunity to operate at an enterprise level and influence information security strategy across multiple business and technology functions.
• Exposure to complex security, compliance, risk, cloud, vendor, and regulatory initiatives.
• Senior-level opportunity to partner directly with executive leadership and business stakeholders.
• Employment contingent upon successful completion of required pre-employment background and drug screening.
• Equal employment opportunity workplace committed to inclusion and nondiscrimination.
• Drug-free workplace environment.