Director of Information Security

Position Value PropositionAs the Director of Information Security at DBMG, you are responsible for leading and advancing the organization’s cybersecurity program to protect information assets, technology, systems, infrastructure, and business operations. This role provides strategic and operational leadership across cybersecurity risk management, security operations, architecture, vulnerability management, incident response, identity and access security, data protection, third-party cybersecurity risk, and security awareness.Core ResponsibilitiesDevelop and execute the enterprise cybersecurity strategy, roadmap, policies, standards, and security priorities aligned with business objectives and enterprise risk.Identify, assess, prioritize, and communicate cybersecurity risks across infrastructure, applications, cloud environments, identities, data, and third parties.Oversee security operations, including threat monitoring, detection, vulnerability management, incident response, and continuous improvement of security capabilitiesEstablish and maintain enterprise security architecture and ensure secure-by-design principles are incorporated into infrastructure, cloud, applications, DevSecOps, and technology initiativesLead cybersecurity incident response and preparedness, including incident playbooks, tabletop exercises, containment, recovery, and post-incident improvementProvide leadership for identity and access security, privileged access, endpoint protection, network and cloud security, and data protection capabilitiesDevelop and maintain cybersecurity awareness and training programs that strengthen employee security behaviors and organizational readinessEstablish cybersecurity metrics and reporting that provide the CIO and executive leadership with visibility into security posture, material risks, incidents, vulnerabilities, and risk-reduction initiativesPartner with Infrastructure, DevSecOps, applications, and other technology teams to ensure cybersecurity controls are implemented, operated effectively, and remediated when deficiencies are identified.Key Performance IndicatorsSuccess in this role may be measured through:Reduction in material cybersecurity risk exposureCritical and high-risk vulnerability remediation performanceSecurity incident frequency, severity, and response effectivenessSecurity control and tooling coverageIdentity and privileged-access risk reductionCybersecurity awareness and phishing-resilience metricsProgress against the approved cybersecurity roadmapTimely remediation of identified cybersecurity deficienciesRequired QualificationsBachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.Certified Information Systems Security Professional (CISSP) certification required within 12 months of hire. 8+ years of progressive experience in cybersecurity, information security, security engineering, or security operations.3+ years of cybersecurity leadership experience.Strong knowledge of cybersecurity risk management, security architecture, threat detection, vulnerability management, incident response, identity and access management, cloud security, endpoint security, and data protection.Demonstrated ability to communicate cybersecurity risk and business impact to executive and non-technical stakeholders.Strong leadership, collaboration, analytical, and decision-making skills.Preferred QualificationsExperience working in complex, distributed, multi-business-unit environments.Experience securing Microsoft Azure, Microsoft 365, hybrid infrastructure, and enterprise applications.Additional relevant cybersecurity certifications such as CISM, CCSP, GIAC, or cloud security certifications.Core CompetenciesCybersecurity Leadership Risk Management Security Architecture Security Operations Incident Response Vulnerability Management Identity & Access Security Executive Communication Business Acumen Cross-Functional Leadership AccountabilityRole BoundaryThe Director of Information Security owns the technical and operational cybersecurity program, including cybersecurity architecture, security operations, incident response, vulnerability remediation, identity security, security tooling, and related technical controlsIndependent IT compliance assurance, SOX and regulatory control testing, audit coordination, compliance evidence management, and compliance framework readiness are owned by the IT Compliance Manager and the appropriate Compliance/Internal Audit organization.Additional Duties & ResponsibilitiesThis job description is not an exclusive or exhaustive list of all responsibilities and functions that an employee in this position may be asked to perform. Duties and responsibilities may be changed, expanded, reduced, or delegated by management to meet the business needs of the company.Work EnvironmentPosition requires as many hours needed to fulfill the daily and weekly obligations required to carry out the functions. Working long days including evenings and weekends can be required for this position. This position is generally indoors in a climate controlled office environment. Reasonable accommodations will be made upon request for those who have disabilities that qualify under the American with Disabilities Act.DBM Global Inc is an Equal Opportunity Employer