Cybersecurity & Resilience Strategy Director

South Shore Bank; Dedham (MA); On-site; USD 167,000 - 200,000; Full time

Job summary

Charlesbridge seeks a Director of Cybersecurity & Resilience to lead cybersecurity and IT risk programs, including third-party risk and business continuity. The role drives a risk-based program aligned with NIST, ISO, and industry guidance, delivering governance visibility to senior leadership.

You will oversee CyberOps, IAM, vulnerability management, incident response, and resilience efforts, coordinating with privacy, legal, and compliance teams.

Qualifications

• Bachelor’s Degree in cybersecurity, information systems, computer science, risk management, or related field, or equivalent experience.
• Ten+ years of cybersecurity/IT risk experience, including leadership in a complex, regulated environment.
• Five+ years of financial services experience and knowledge of banking products and regulatory terms (preferred).
• Demonstrated experience with governance, risk assessments, security operations, vulnerability management, incident response, IAM, third-party cybersecurity risk, data protection, and cyber resilience.
• Proven experience leading employees and cybersecurity service providers and delivering results.
• Experience developing budgets, resource plans, metrics, and risk-based investments.
• Ability to communicate cybersecurity and IT risk to both technical and business leaders.
• Strong analytical, organizational, planning, problem-solving, influencing, and change management skills.
• CISSP, CISM, CRISC or equivalent preferred; proficiency with MS Office and cybersecurity tools.

Responsibilities

• Lead the cybersecurity and IT risk management functions, including third-party risk and business continuity.
• Develop and execute risk-based cybersecurity programs, policies, standards, and roadmaps.
• Oversee CyberOps, including monitoring, detection, investigation, escalation, containment, and recovery.
• Manage risk identification, assessment, treatment, and reporting; maintain risk registers.
• Lead incident response plans, playbooks, and escalation procedures; coordinate lessons learned.
• Oversee IAM, MFA, access reviews, and joiner-mover-leaver controls.
• Set architecture and hardening requirements; measure risk before major changes.
• Oversee third-party risk lifecycle, due diligence, monitoring, and termination risk.
• Manage business continuity and technology resilience, disaster recovery, and recovery testing.
• Coordinate with privacy, legal, compliance and business stakeholders on safeguards.
• Monitor risk metrics, KPIs, control effectiveness, incidents, vulnerabilities, and remediation.
• Coordinate risk support for audits, regulatory examinations, assessments, and control reviews.
• Promote cybersecurity awareness and education programs within the organization.
• Maintain up-to-date risk policies, standards, and management reports.
• Develop the cybersecurity budget and investment priorities.
• Participate in governance committees and report remediation progress in business terms.
• Supervise cybersecurity personnel and service providers; set expectations and accountability.
• Stay aware of threat trends and regulatory changes; propose improvements.

Skills

Cybersecurity governance

Risk management

Incident response

Identity and access management

Third-party risk

Business continuity planning

Regulatory compliance

Communication to senior management

Analytical thinking

Change management

Education

Bachelor's Degree in cybersecurity, information systems, or related field

Job description

Charlesbridge seeks a Director of Cybersecurity & Resilience to lead cybersecurity and IT risk programs, including third-party risk and business continuity. The role drives a risk-based program aligned with NIST, ISO, and industry guidance, delivering governance visibility to senior leadership.

You will oversee CyberOps, IAM, vulnerability management, incident response, and resilience efforts, coordinating with privacy, legal, and compliance teams.