Senior Director - Information Security

Accountabilities: Act as a delegate and representative of the Corporate Security Officer, supporting executive initiatives and enterprise information security strategy. Develop, maintain, and continuously improve enterprise security policies, standards, procedures, and incident response plans in alignment with industry best practices and applicable compliance requirements. Lead enterprise-wide security initiatives, including risk assessments, incident response coordination, cloud security evaluations, and secure software development lifecycle (DevSecOps) programs. Provide expert technical and written responses to security-related requirements within federal, state, and commercial contract proposals. Present security posture assessments, enterprise risk summaries, recommendations, and investment justifications to senior executives and key stakeholders. Build strong partnerships with business units and IT leadership to integrate security considerations into organizational processes, technology initiatives, and strategic decisions. Oversee supply chain and third-party vendor risk management programs, ensuring vendors and partners align with enterprise security objectives. Coordinate and facilitate internal and external security audits, enterprise risk assessments, and regulatory compliance reviews. Identify emerging security risks and opportunities for strengthening organizational controls, resilience, and compliance. Operate independently within broad organizational policies and practices, escalating complex issues when clarification of established procedures or policies is required. Requirements Master’s degree required; relevant experience may be considered where permitted by the organization. 15+ years of professional experience in information security, cybersecurity, risk management, or a closely related field. CISSP or an equivalent information security certification required. CISM certification preferred. Certified Cloud Security Professional (CCSP) certification preferred. GIAC Security Leadership Certification (GSLC) preferred. Extensive experience developing and executing enterprise information security strategies, programs, policies, and governance frameworks. Strong knowledge of security risk management, regulatory compliance, incident response, cloud security, DevSecOps, and third-party/vendor risk. Demonstrated ability to lead complex, cross-functional security initiatives involving business and technology stakeholders. Strong executive communication skills, with the ability to translate complex security risks and technical concepts into clear, actionable recommendations. Experience supporting security audits, risk assessments, regulatory reviews, and contractual or proposal security requirements. Strong strategic thinking, analytical judgment, problem-solving, and decision-making skills. Ability to build trusted relationships across organizational levels and influence stakeholders without relying solely on direct authority. Comfortable working independently and managing broad responsibilities with limited day-to-day supervision. Benefits Annual salary range of $130,669–$198,029 , depending on qualifications, experience, and other applicable factors. Remote work arrangement, with the position listed as home-based in the United States. Opportunity to operate at an enterprise level and influence information security strategy across multiple business and technology functions. Exposure to complex security, compliance, risk, cloud, vendor, and regulatory initiatives. Senior-level opportunity to partner directly with executive leadership and business stakeholders. Employment contingent upon successful completion of required pre-employment background and drug screening. Equal employment opportunity workplace committed to inclusion and nondiscrimination. Drug-free workplace environment.