Director Cybersecurity

## WHAT YOU WILL DO As the Director, Cybersecurity Program, you will provide expertise in governance, program management, project management, and hands on work supporting the cybersecurity engineering and operations team members. This is a hand-on role that involves technical work as well as documentation for process and standards. Responsibilities include, but are not limited to: Being a leader in the implementation of the company’s cybersecurity strategy, leading engineering and architecture activities, performing internal ongoing evaluations of cloud and data center infrastructure, applications, and computing resources. Partnering closely with information technology, devops, and product teams to effectively implement the technology, platform, and product. Periodically performing technical activities such as vulnerability assessment, auditing access administration technologies, tuning intrusion prevention tools, assessing firewalls, configuring web application firewalls, integrating logging into security event management technologies. Being proactive on threats to integrate countermeasures into the design of defensive strategies. Evaluating infrastructure changes for security implications and recommend enhancements through research and analysis. Periodically reviewing drafted cyber security policies, building process and engineering documentation, and working with the operations team members to construct run books and knowledge bases. Demonstrate emotional intelligence and strong communication skills through effective collaboration Show an aptitude for managing budgets, projects and project based work Assisting our company with achieving and maintaining compliance with various information security frameworks (i.e. NIST, SOC2, ISO 27001, etc.) and with industry and government rules and regulations. ## WHAT YOU WILL NEED TO SUCCEED To succeed in this role, you should have a mixed background in leading and performing hands-on technical work as well as cybersecurity program management, governance, and architecture. Having a background in operating and working with operational security solutions and building processes for vulnerability assessment, remediation, event analysis, incident management, and threat identification will be incredibly beneficial for the role. Ideally, you will have some experience working with virtualization, Kubernetes, cloud platforms, and SaaS solutions security. You will also need to be familiar with implementing security frameworks such as NIST-CSF, CIS, and/or ISO. Apply tot his job