Director of IT Security

Confidentiel; Houston (TX); On-site; USD 180,000 - 250,000; Full time

Job summary

Confidentiel is seeking a Director of Information Security to lead the enterprise security program, partnering with executives across IT, legal, and compliance to safeguard assets and operations. The role requires strong governance, risk management, and a hands-on leadership approach.

The successful candidate will drive security strategy, manage budgets and vendors, and foster a culture of security awareness while balancing strategic vision with operational excellence.

Qualifications

• Bachelor's degree in IT, cybersecurity, CS or related field.
• 8–12+ years in IT/cybersecurity or information security.
• 3–5+ years in security leadership/management.
• Experience developing and managing enterprise security programs.
• Strong knowledge of frameworks, risk management and governance.
• Experience with security operations, incident response and audits.
• Experience overseeing regulatory compliance and third‑party risk.

Responsibilities

• Develop and implement the enterprise information security strategy and programs.
• Lead security operations, incident response, and risk management efforts.
• Collaborate with executives and stakeholders to align security with business goals.
• Ensure regulatory compliance and manage third‑party risk.

Skills

Security leadership

Risk management

Security architecture

Incident response

Vendor management

Education

Bachelor's degree

Job description

The Director of Information Security is responsible for developing, implementing, and maintaining the organization's enterprise information security strategy, policies, standards, and programs to protect the confidentiality, integrity, and availability of organizational information assets, systems, and technology infrastructure.

This role provides strategic leadership and operational oversight of cybersecurity, information risk management, security architecture, threat and vulnerability management, incident response, identity and access management, security awareness, and regulatory compliance.

The Director partners with executive leadership, IT, business stakeholders, legal, compliance, and other functional teams to ensure security is integrated into business operations, technology initiatives, and organizational decision-making.

The successful candidate will balance strategic vision with hands‑on leadership, proactively identify and mitigate security risks, strengthen the organization's security posture, and foster a culture of security awareness and accountability.

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline.
• 8–12+ years of progressive experience in information technology, cybersecurity, or information security.
• 3–5+ years of experience in a security leadership or management role.
• Demonstrated experience developing and managing enterprise information security programs.
• Strong knowledge of cybersecurity frameworks, security architecture, risk management, and governance.
• Experience managing security operations, incident response, vulnerability management, and security assessments.
• Experience overseeing regulatory compliance, audits, and third-party risk management.
• Demonstrated ability to communicate complex security risks to executive leadership and business stakeholders.
• Experience managing security budgets, vendors, and technical teams.