Information Security Director (Hybrid) — Risk, Compliance & Cloud

Confidential; Pittsburgh (Allegheny County); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Confidential seeks a Manager, Information Security to strengthen our security posture across governance, risk, compliance, and operations. You will lead a team of engineers, partner with IT and business leaders, and oversee policies, controls, and security tooling across on-premises, cloud, and identities.

You will drive threat intelligence, risk assessments, audits, and security awareness programs while managing budgets and external vendors. Travel may be required.

Qualifications

• Bachelor’s degree in IT, cybersecurity, CS, or related field or equivalent experience.
• Minimum 10 years IT experience with at least 5 years in information security.
• At least 3 years managing security engineers or similar personnel.
• Strong background in networking, systems administration, and cloud security.
• Experience implementing ISO 27001 and ISO 27701 programs.

Responsibilities

• Develop, maintain, and improve security policies, standards, and governance processes.
• Lead risk management activities including threat intel, risk assessments, and mitigation planning.
• Manage compliance programs: ISO 27001/27701, PCI-DSS, audits, and security questionnaires.
• Oversee security resources, budgets, vendors, and MSSPs.
• Lead awareness, training, and communicate security posture to stakeholders.
• Review security architectures for network, systems, apps, identities, and cloud.
• Oversee monitoring, testing, audits, remediation, and compliance tracking.
• Oversee detection/response capabilities: log aggregation, SIEM, incident response.
• Provide leadership for security technologies and operational functions (firewalls, EDR, IAM).
• Mentor technical security staff and collaborate with IT and business units.

Skills

Information security

Governance

Risk management

Security operations

Threat intelligence

Incident response

Leadership

Communication

Vendor management

Education

Bachelor's degree in Information Technology, Cybersecurity, or related field

Equivalent education and experience

Tools

SIEM

EDR/NGAV

Firewall management

Vulnerability management

Job description

Confidential seeks a Manager, Information Security to strengthen our security posture across governance, risk, compliance, and operations. You will lead a team of engineers, partner with IT and business leaders, and oversee policies, controls, and security tooling across on-premises, cloud, and identities.

You will drive threat intelligence, risk assessments, audits, and security awareness programs while managing budgets and external vendors. Travel may be required.