Director, Information Security

Employers; Northern (KY); Remoto; USD 120.000 - 185.000; Tempo pieno

Descrizione del lavoro

EMPLOYERS is seeking a Director of Information Security to lead a disciplined program, embedding security design thinking in every major technology decision. This remote role centers on owning the roadmap, budgets, and vendor relationships while ensuring security architecture is integrated across AWS and Azure.

Candidates will bring extensive leadership experience in security programs, governance, and cross-functional collaboration, with a track record of delivering outcomes in complex

Competenze

• Seven or more years leading security programs or technology leadership.
• Experience managing cross-functional programs and budgets.
• Familiarity with security governance, vendor management, and audits.

Mansioni

• Own and track the security program roadmap and milestones.
• Manage security budgets, spend visibility, and vendor relations.
• Embed security design principles in major technology decisions.
• Lead security architecture across AWS and Azure landscapes.
• Coordinate with cross-functional teams and maintain required governance.

Conoscenze

Security leadership

Program management

Security architecture

Vendor management

Budget management

Cross-functional collaboration

Communication

Strategic thinking

Cloud security design

Identity and access management

NIST CSF / ISO 27001 familiarity

Formazione

Bachelor’s or Master’s degree

Strumenti

AWS

Azure

Active Directory / Entra ID

Descrizione del lavoro

Director, Information Security

100% Remote (WFH) Opportunity

The Director of Information Security’s role is to keep the program running with discipline and ensures security design thinking is present at every major technology decision. Security architecture is not a separate function layered on top: it is embedded in this role by design.

WHAT THIS ROLE DOES

• Keep the Program on Track
  • Own the security program roadmap: monitor progress against Phase 1 milestones, surface blockers early, and scale to the CISO with recommended actions rather than status reports
  • Begin technology portfolio rationalization in Phase 1: the strategy's three-year cost projection depends on this work starting immediately, not in Phase 2
  • Manage the security budget with visibility into spend, variance, and vendor commitments across the full portfolio
  • Own and evolve all security vendor relationships for non-MDR contracts: renewals, performance reviews, and contract alignment with program direction
  • Maintain the technology portfolio inventory and rationalization tracker actively from Month 1
• Own Security Architecture
  • Serve as the program's embedded security architect, ensuring security design principles are present at every major technology decision
  • Own the security architecture function in the absence of a separate Security Architect position: this is a deliberate consolidation, not a capability gap
  • Participate in all major technology design reviews with particular focus on the bifurcated cloud footprint: AWS for workloads and AI functions; Azure for Dynamics 365, M365, and Entra ID
  • Drive the on-premises Active Directory deprecation plan in Phase 1 as a prerequisite for identity consolidation
  • Maintain alignment between the IAM modernization project and the CISO organization's security design requirements
• Drive Cross-Functional Coordination
  • Serve as the CISO's proxy in cross-functional meetings where security perspective is needed but the CISO is unavailable
  • Coordinate security engagement across active modernization programs (Dynamics 365 CRM, AI adoption, digital distribution) to ensure design-stage participation is consistent and tracked
  • Manage the compliance coordination model with the GRC function to ensure no regulatory deadline is missed
  • Drive the ERM partnership cadence with BCP/DR program owners
• Own Continuous Improvement
  • Track every nonconformity, corrective action, and after-action finding to closure
  • Own the program metrics dashboard: translate operational data into executive-ready reporting for the CIO and Board
  • Lead the quarterly program review cycle and annual strategy refresh process

Experience

• Seven or more years in technology leadership, security program management, security architecture, or equivalent operational leadership
• Demonstrated experience managing complex, cross-functional programs with a small team
• Familiarity with security program governance, vendor management, and budget operations
• Experience in regulated industries and comfort navigating compliance calendars and audit cycles
• Track record of delivering program outcomes in environments where structure must be built, not inherited
• Leadership and Judgment
  • Exceptional organizational and communication skills: this role runs on clarity and follow-through
  • Comfortable operating with ambiguity and exercising independent judgment when the CISO is not available
  • Ability to build credibility across functions without formal authority
  • Orientation toward outcomes and accountability: tracks what matters, drops what does not
• Technical Scope
  • Security architecture familiarity: cloud security design across AWS and Azure, identity and access management, and zero-trust principles
  • Working knowledge of security program frameworks (NIST CSF, ISO 27001 principles) sufficient to manage against them
  • Familiarity with security technology portfolio components to support rationalization and vendor evaluation
  • Comfortable with data: program metrics, budget models, and risk registers are daily tools

Education

• Bachelor’s or Master’s degree in Computer Science, Data Science, Information Systems, Business, or a related field.

Work Environment

• Remote: This role is a remote (work from home (WFH) opportunity) and only open to candidates currently located in the United States and able to work without sponsorship.
• It requires a suitable space that provides a private and quiet workplace.
• Expected Work Hours: Schedules are set to accommodate the requirements of the position and the needs of the organization and may be adjusted as needed.
• Travel: May be required to travel to off-site location(s) to attend meetings, as necessary

Salary Range:

$120,000 - $185,000 and a comprehensive benefits package, please follow the link to our benefits page for details! EMPLOYERS Benefits

About EMPLOYERS

As a dynamic, fast-growing provider of workers' compensation insurance and services, we are seeking a goal-oriented individual willing to put their ideas to work!

We offer a positive, challenging work environment, combined with an opportunity to build your career as you help us grow our business, in innovative and imaginative ways that are uniquely EMPLOYERS!

Headquartered in Nevada, EMPLOYERS attributes its long-standing success to its most valuable resource, our employees across the United States. EMPLOYERS is known for the quality service and expertise we provide to our clients, and the exemplary work environment we provide for our employees.

We live and breathe our core values: Integrity, Customer Focus, Collaboration, Initiative, Accountability, Innovation, and Personal Fulfillment. These are the pillars that support how we do business with our clients as well as how we treat each other!

At EMPLOYERS, you’ll discover an energetic environment that inspires top achievement. As “America’s small business insurance specialist”, we have the resources, a solid reputation and an expanding nationwide identity to enrich your work/life and enhance your career. #LI-Remote About EMPLOYERS