Director of Information Security

DBM Global Inc.; Phoenix (AZ); Presencial; USD 180.000 - 280.000; Jornada completa

Descripción de la vacante

DBM Global Inc. is seeking a Director of Information Security in Phoenix to lead and advance the organization’s cybersecurity program, protecting information assets, technology, systems and operations.

The role provides strategic and operational leadership across risk management, security operations, architecture, vulnerability management and data protection. Responsibilities include establishing secure-by-design practices, leading incident response, managing identity and access security, and

Responsabilidades

• Develop and execute the enterprise cybersecurity strategy, roadmap, policies, standards and security priorities aligned with business objectives and enterprise risk.
• Identify, assess, prioritize and communicate cybersecurity risks across infrastructure, applications, cloud environments, identities, data and third parties.
• Oversee security operations, including threat monitoring, detection, vulnerability management, incident response and continuous improvement of security capabilities.
• Establish and maintain enterprise security architecture and ensure secure-by-design principles in infrastructure, cloud, applications, DevSecOps and technology initiatives.
• Lead cybersecurity incident response and preparedness, including incident playbooks, tabletop exercises, containment, recovery and post-incident improvement.
• Provide leadership for identity and access security, privileged access, endpoint protection, network and cloud security, and data protection capabilities.
• Develop and maintain cybersecurity awareness and training programs that strengthen employee security behaviors and organizational readiness.
• Establish cybersecurity metrics and reporting for CIO and executive leadership on security posture, material risks, incidents, vulnerabilities and risk-reduction initiatives.
• Partner with Infrastructure, DevSecOps, applications and other technology teams to ensure cybersecurity controls are implemented, operated effectively and remediated when deficiencies are identified.

Descripción del empleo

Position Value Proposition

As the Director of Information Security at DBMG, you are responsible for leading and advancing the organization’s cybersecurity program to protect information assets, technology, systems, infrastructure, and business operations. This role provides strategic and operational leadership across cybersecurity risk management, security operations, architecture, vulnerability management, incident response, identity and access security, data protection, third-party cybersecurity risk, and security awareness.

Position Value Proposition

As the Director of Information Security at DBMG, you are responsible for leading and advancing the organization’s cybersecurity program to protect information assets, technology, systems, infrastructure, and business operations. This role provides strategic and operational leadership across cybersecurity risk management, security operations, architecture, vulnerability management, incident response, identity and access security, data protection, third-party cybersecurity risk, and security awareness.

Core Responsibilities

• Develop and execute the enterprise cybersecurity strategy, roadmap, policies, standards, and security priorities aligned with business objectives and enterprise risk.
• Identify, assess, prioritize, and communicate cybersecurity risks across infrastructure, applications, cloud environments, identities, data, and third parties.
• Oversee security operations, including threat monitoring, detection, vulnerability management, incident response, and continuous improvement of security capabilities
• Establish and maintain enterprise security architecture and ensure secure-by-design principles are incorporated into infrastructure, cloud, applications, DevSecOps, and technology initiatives
• Lead cybersecurity incident response and preparedness, including incident playbooks, tabletop exercises, containment, recovery, and post-incident improvement
• Provide leadership for identity and access security, privileged access, endpoint protection, network and cloud security, and data protection capabilities
• Develop and maintain cybersecurity awareness and training programs that strengthen employee security behaviors and organizational readiness
• Establish cybersecurity metrics and reporting that provide the CIO and executive leadership with visibility into security posture, material risks, incidents, vulnerabilities, and risk-reduction initiatives
• Partner with Infrastructure, DevSecOps, applications, and other technology teams to ensure cybersecurity controls are implemented, operated effectively, and remediated when deficiencies are identified.

Key Performance Indicators

Success in this role may be measured through:

• Reduction in material cybersecurity risk exposure
• Critical and high-risk vulnerability remediation performance
• Security incident frequency, severity, and response effectiveness
• Security control and tooling coverage