Head of Cybersecurity Strategy & Compliance

ICC | International Code Council; Country Club Hills (IL); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Comprehensive benefits package

Paid vacation and sick time

401k with generous company match

Job summary

International Code Council is seeking a Director of Cyber Security to define, execute, and continually improve ICC’s enterprise cybersecurity program across platforms, cloud, and AI initiatives. You will own security strategy, governance, and risk, and drive certifications with SWK and external audits.

The role partners with senior leadership, oversees SOC/SIEM, and leads a team to ensure compliance with NIST CSF 2.0, PCI DSS, GDPR, CCPA, and ISO 27001 readiness.

Qualifications

• Bachelor’s degree or equivalent experience; Master’s preferred.
• 10+ years cybersecurity experience.
• 5+ years leadership experience.
• Experience with SOC 2 / ISO 27001 certification efforts preferred.

Responsibilities

• Define and execute enterprise cybersecurity strategy aligned to business objectives and governance.
• Lead cross-functional security initiatives and advise executive leadership.
• Oversee security operations including SOC, SIEM, and 24/7 monitoring.
• Own incident response program, tabletop exercises, and ransomware readiness.
• Drive certifications and framework maturity for SOC 2 Type II and ISO 27001.

Skills

NIST CSF 2.0

ISO 27001

SOC 2

AWS/Azure security

Data protection

Privacy compliance

Executive communication

Vendor management

Threat management

Auditor coordination

Leadership

Education

Bachelor’s degree or equivalent experience

Job description

International Code Council is seeking a Director of Cyber Security to define, execute, and continually improve ICC’s enterprise cybersecurity program across platforms, cloud, and AI initiatives. You will own security strategy, governance, and risk, and drive certifications with SWK and external audits.

The role partners with senior leadership, oversees SOC/SIEM, and leads a team to ensure compliance with NIST CSF 2.0, PCI DSS, GDPR, CCPA, and ISO 27001 readiness.