Director, Cyber Security & Certification Readiness

International Code Council; Country Club Hills (IL); On-site; USD 160,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401k with match

Paid vacation and sick time

Life insurance

Job summary

International Code Council (ICC) is seeking a Director of Cyber Security to define and execute ICC’s enterprise cybersecurity program, aligning with NIST CSF 2.0 and driving risk-based remediation across platforms and cloud environments. The role includes governance, third‑party risk, and leading responsibility for certifications with SWK and internal teams.

The position requires 10+ years in cybersecurity, 5+ years in leadership, and experience with SOC 2 and ISO 27001.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 10+ years of progressive cybersecurity experience.
• 5+ years of leadership experience.
• Experience with SOC 2 and ISO 27001 certification efforts preferred.
• Experience managing outsourced/MSP or vCISO relationships preferred.
• Deep knowledge of NIST CSF 2.0, 800-53, ISO 27001, CIS frameworks.
• Experience with SOC, SIEM, cloud security (AWS/Azure), and IAM.
• Ability to translate technical risk into business terms.

Responsibilities

• Define and execute enterprise cybersecurity strategy aligned to ICC objectives.
• Lead governance under NIST CSF 2.0 and drive program maturity.
• Oversee security operations, incident response, and vulnerability management.
• Own relationships with SWK Technologies and external security providers.
• Lead certifications readiness (SOC 2 II, ISO 27001) and audit activities.
• Provide executive reporting and secure budget alignment.
• Foster cross-functional collaboration across IT, legal, and business units.

Skills

Cybersecurity leadership

NIST CSF 2.0

Executive communication

Vendor management

Risk-based remediation

Cloud security

IAM

Audit coordination

Education

Bachelor’s degree in a related field

Master’s degree preferred

Tools

SOC/SIEM

AWS/Azure security

D365 security

Job description

International Code Council (ICC) is seeking a Director of Cyber Security to define and execute ICC’s enterprise cybersecurity program, aligning with NIST CSF 2.0 and driving risk-based remediation across platforms and cloud environments. The role includes governance, third‑party risk, and leading responsibility for certifications with SWK and internal teams.

The position requires 10+ years in cybersecurity, 5+ years in leadership, and experience with SOC 2 and ISO 27001.