Cybersecurity Director — GRC, Cloud & Zero Trust (Remote)

Businesswire; San Francisco (CA); Hybrid; USD 230,000 - 245,000; Full time

Benefits offered by this job

Remote work

Excellent health benefits

Fitness stipend

Tuition reimbursement

401(k) plan with company match

PTO & holidays

Job summary

Business Wire, a Berkshire Hathaway company, is seeking a Cybersecurity Director to provide strategic leadership across security, GRC, and risk management. You will guide security architecture, cloud security, privacy requirements, and governance frameworks while partnering with cross-functional teams to embed risk practices in all operations.

The role emphasizes executive-level incident leadership, vendor oversight, and continuous improvement of security programs across on-prem and cloud hosted

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• 10+ years of information security with 5+ years of managerial and strategic leadership.
• Expertise in cloud security (AWS, Azure), security architecture, and Zero Trust.
• Experience building and governing GRC programs and risk management processes.
• Familiarity with PCI DSS, SOC 2, ISO 27001 compliance requirements.
• Strong leadership, communication, and ability to translate technical risk to executives.

Responsibilities

• Develop and lead cybersecurity and GRC strategy and long-term roadmap aligned to business goals.
• Oversee security architecture, cloud security, identity management, and vulnerability controls.
• Drive risk assessments, penetration testing, and remediate findings across environments.
• Manage security governance, audits, policies, and external partner relationships.
• Coordinate security incidents with executives and cross-functional teams including Legal and HR.

Job description

Business Wire, a Berkshire Hathaway company, is seeking a Cybersecurity Director to provide strategic leadership across security, GRC, and risk management. You will guide security architecture, cloud security, privacy requirements, and governance frameworks while partnering with cross-functional teams to embed risk practices in all operations.

The role emphasizes executive-level incident leadership, vendor oversight, and continuous improvement of security programs across on-prem and cloud hosted