Director of Cybersecurity

Job description

**POSITION OVERVIEW** We are seeking a seasoned and visionary Director of Cybersecurity to lead and mature our organization’s security posture. This is a leadership role responsible for establishing strategy, owning execution, and driving a security-first culture across the enterprise. The ideal candidate is a self-starter who thrives with autonomy, can translate complex security challenges into actionable programs, and brings deep hands-on experience alongside the executive presence to influence at every level of the organization. This role requires someone who is equally comfortable architecting Zero Trust frameworks, leading an incident response war room, and providing risk metrics for presentation to the executive team. You will assist in the full security lifecycle, from policy to tooling to people, and provide actionable information and propose solutions for protecting the organization’s assets, infrastructure, and data. **KEY RESPONSIBILITIES** **Security Strategy & Leadership** - Assist in defining and continuously improve the organization’s enterprise cybersecurity strategy and roadmap - Lead security initiatives independently, with minimal oversight, from concept through successful delivery - Build, mentor, and manage a high-performing cybersecurity team; foster a culture of accountability and continuous improvement - Provide actionable intelligence and metrics for presentation to executive leadership on risk, compliance, and emerging threats - Assist in establishing and maintaining security governance frameworks, policies, standards, and procedures - Owns strategy and management of security operations **Incident Response & Threat Management** - Assist in the development, maintenance, and execution of the Incident Response (IR) program, including playbooks, tabletop exercises, and post-incident reviews - Serve as the secondary incident commander for security events; coordinate cross-functional response teams - Oversee threat intelligence operations and integrate findings into proactive defense strategies - Conduct and oversee vulnerability management, penetration testing coordination, and risk remediation programs **Network & Infrastructure Security** - Manage end-to-end network security architecture including segmentation, monitoring, and access controls - Manage and optimize network security tooling - Implement and enforce Zero Trust network access (ZTNA) principles across on-premise and remote environments **Security Testing** - Own strategy and execution of testing security controls via automated testing, red/blue/purple teaming, and third-party penetration testing **Cloud & Endpoint Security** - Provide guidance and assist in cloud security strategy, architecture, and compliance across multi-cloud and hybrid environments - Oversee endpoint detection and response (EDR/XDR) programs - Manage Mobile Device Management (MDM) programs; preferred experience with Microsoft Intune - Administer and mature Identity & Access Management (IAM) using Role-Based Access Control (RBAC) principles along with Just in Time (JIT) access and Privileged Access Management (PAM) **IT Operations & Tooling** - Oversee RMM/PSA security integrations - Partner with IT operations to ensure security is embedded in all infrastructure and tooling decisions - Work with the DevSecOps Manager to support DevSecOps practices, ensuring security is integrated throughout the software development lifecycle (SDLC) **Compliance & Risk Management** - Assist the owner of the organization’s security controls for our compliance programs (e.g., SOC 2, ISO 27001, NIST CSF, or relevant frameworks) - Conduct and oversee regular risk assessments, audits, and third-party vendor security reviews - Maintain up-to-date knowledge of regulatory landscape and ensure organizational adherence **REQUIRED QUALIFICATIONS** - Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, Information Techonlogy or equivalent practical experience. - 8+ years of progressive cybersecurity experience, including 4+ years in a leadership or management capacity - Minimum of 10+ years in Information Technology/Cybersecurity - Demonstrated ability to define and execute security programs with limited oversight in a fast-paced environment - Deep expertise in incident response planning, execution, and post-incident analysis - Strong knowledge of network security architecture, segmentation strategies, firewalls, and IDS/IPS - Proven experience implementing and operating Zero Trust architecture - Hands-on cloud security experience (Azure, AWS, or GCP) including cloud-native security tooling and CSPM - Experience managing MDM solutions for endpoint lifecycle, policy enforcement, and compliance - Solid understanding of RBAC models and identity governance in enterprise environments - Fluency with DevSecOps concepts including secure CI/CD, SAST/DAST tooling, and shift-left security practices - Exceptional communication skills; able to present complex technical risk to non-technical stakeholders - Executive communication skills; able to present strategy and reports to executive leadership - Must be based in Austin, TX or willing to relocate