Chief Cybersecurity Strategist & Certification Lead

ICC Evaluation Service, LLC; Country Club Hills (IL); On-site; USD 140,000 - 210,000; Full time

Job summary

The International Code Council is seeking a Director of Cyber Security to define and execute ICC’s enterprise cybersecurity program, protecting digital assets and member data while enabling business growth.

You will lead strategy, governance, risk management, and alignment with NIST CSF 2.0, and drive certifications such as SOC 2 Type II and ISO 27001. This role also interfaces with SWK Technologies for security services oversight.

Qualifications

• Bachelor’s degree in a related field; Master’s preferred.
• 10+ years of progressive cybersecurity experience.
• 5+ years of leadership experience; ability to influence executives.
• Experience with SOC 2, ISO 27001, and external audits.
• Experience managing outsourced security services or vCISO relationships.
• Deep knowledge of NIST CSF 2.0, ISO 27001, CIS; strong risk focus.

Responsibilities

• Define and execute enterprise cybersecurity strategy aligned to ICC objectives.
• Lead governance per NIST CSF 2.0; drive risk management and remediation.
• Oversee security operations including SOC, SIEM, and 24/7 monitoring.
• Own incident response program; tabletop exercises and vendor coordination.
• Advance certifications (SOC 2 Type II, ISO 27001) and framework maturity.
• Partner with SWK Technologies for outsourced security services governance.

Skills

Leadership

Executive communication

Cross-functional teamwork

Vendor management

Strategic thinking

Education

Bachelor's degree

Master's preferred

Tools

SOC/SIEM

Cloud security (AWS/Azure)

IAM

NIST CSF 2.0 knowledge

Job description

The International Code Council is seeking a Director of Cyber Security to define and execute ICC’s enterprise cybersecurity program, protecting digital assets and member data while enabling business growth.

You will lead strategy, governance, risk management, and alignment with NIST CSF 2.0, and drive certifications such as SOC 2 Type II and ISO 27001. This role also interfaces with SWK Technologies for security services oversight.