Director of Information Assurance

Rezult Group; Enterprise (AL); On-site; USD 120,000 - 180,000; Full time

Job summary

Rezult Group in the United States is seeking a Director of Information Assurance to lead and mature the enterprise security program. This role blends strategic direction with hands-on operations across monitoring, incident response, and risk management to protect critical assets.

You will lead a security team, coordinate with executives, and report on risk in business terms, aligning the program with recognized frameworks and ensuring 24/7 security readiness in a hybrid or onsite environment in

Qualifications

• 10+ years IT experience including 5–7 years in information security/cybersecurity
• 3+ years in a formal leadership role with direct reports and budget accountability
• Hands-on operational depth in security monitoring, incident response, and vulnerability management
• Experience leading response to at least one significant security incident
• Working knowledge of network security, endpoint security, IAM, and cloud security in hybrid environments
• Familiarity with frameworks (NIST CSF, NIST 800-53, CIS Controls, ISO 27001)
• CISSP required or strongly preferred; CISM, CRISC, CISA, or GIAC certifications valued

Responsibilities

• Own and mature the enterprise information security program - strategy, multi-year roadmap, and risk-based capability model
• Direct security monitoring and detection operations including SIEM, EDR, network detection, and identity threat detection
• Own the incident response program end to end and serve as incident commander for high severity events
• Manage the enterprise vulnerability management lifecycle including scanning, remediation SLAs, and verification
• Maintain the enterprise risk register, lead risk assessments and control gap analyses
• Lead a security team and provide coaching, career development, and operational structure
• Own the security awareness and training program and deliver executive-level briefings

Skills

Security leadership

Incident response

Vulnerability management

Risk management

Security monitoring

Executive communication

Cloud security

Education

CISSP

CISM

CRISC

CISA

GIAC certifications

Tools

EDR solutions

SIEM platforms

Job description

Rezult Group continues to make great strides toward enhancing the technology services community nationwide. We are consistently looking for qualified professionals to join us in achieving success.

Currently we are searching for a Director of Information Assurance to fulfill an immediate full-time vacancy. This position is a Full-Time, Direct Hire position that sits onsite in southeast Alabama.

Day to Day Responsibilities:

• Own and continuously mature the enterprise information security program - strategy, multi-year roadmap, and risk based capability model - while staying hands on with daily security operations, monitoring, and incident response
• Direct security monitoring and detection operations including SIEM, EDR, network detection, and identity threat detection, whether delivered in house, through a managed provider, or a hybrid model
• Own the incident response program end to end: maintain IR plans/playbooks, lead triage and containment, direct root cause analysis, and serve as incident commander for high severity events
• Manage the enterprise vulnerability management lifecycle - scanning, risk based prioritization, remediation SLAs, and verification - and direct penetration testing, red team exercises, and phishing simulations
• Maintain the enterprise risk register, lead risk assessments and control gap analyses, and align the program to a recognized framework (NIST CSF, CIS Controls, or ISO 27001)
• Lead a small, experienced security team (analysts and operators across junior through senior levels), providing coaching, career development, and operational structure for a 247 capable environment
• Own the security awareness and training program for the broader employee base, and deliver executive level briefings translating technical risk into business terms

Position Requirements:

• 10+ years of IT experience, including 5-7 years in information security/cybersecurity and at least 3 years in a formal leadership role with direct reports and budget accountability
• Demonstrated ownership of an enterprise security program, including policy development, risk assessment, and executive reporting
• Hands on operational depth in security monitoring, incident response, and vulnerability management, including documented experience leading response to at least one significant security incident
• Working knowledge of network security, endpoint security, identity and access management, and cloud security in a hybrid on prem/cloud environment
• Practical command of at least one major security framework (NIST CSF, NIST 800-53, CIS Controls, or ISO 27001)
• CISSP required or strongly preferred; CISM, CRISC, CISA, or relevant GIAC certifications also valued
• Strong communicator able to translate technical risk for non technical/executive audiences, with sound judgment operating under pressure and resource constraints