Senior Cybersecurity Operations and Defense Director

CRC Group; Charlotte (NC); On-site; USD 180,000 - 240,000; Full time

Job summary

CRC Group, headquartered in Charlotte, NC, seeks a Senior Cybersecurity Operations and Defense Director to lead the organization's information security program. The role covers governance, risk management, cyber defense, and protection of enterprise assets.

You will guide cross-functional teams, establish security frameworks, ensure regulatory compliance, and drive budget planning and ROI on security investments to advance resilience across the enterprise.

Qualifications

• Bachelor’s degree in IT or Cybersecurity, with a master’s preferred.
• 12+ years in information security or IT risk management.
• 7+ years in leadership directing enterprise security functions.
• 3-5 years AI enablement for security operations and automation.
• Proven cybersecurity strategy development and implementation.

Responsibilities

• Develop and execute enterprise-wide information security strategy.
• Oversee governance, risk, and compliance initiatives to ensure adherence to standards.
• Lead development and implementation of security policies, standards, and guidelines.
• Direct vulnerability management, incident response, and threat detection operations.
• Oversee AI enablement for Cyber Operations.
• Partner with executives, legal, and IT to manage security risks and business continuity.
• Drive security awareness programs and adoption of best practices.
• Lead, mentor, and manage senior security professionals and cross-functional initiatives.
• Develop security budgets and ROI from security investments.

Skills

Cybersecurity leadership

Governance & risk

Incident response

Security architecture

Regulatory compliance

Education

Bachelor's degree in Information Technology or Cybersecurity

Master's degree in Cybersecurity or related field

Tools

Security Copilot

Claude

ChatGPT

Job description

CRC Group is a leading, independent pure-play brokerage and underwriting specialty insurance distributor. Our culture puts people first, prioritizing long-term relationships, ethical decision-making, and continuous improvement. As a result of listening to our employees, CRC Group earned a Top Workplaces USA award three years in a row based solely on employee feedback and CRC Group is currently Great Place To Work Certified! If you want to work for a company where employees are valued and growth is encouraged, CRC Group could be the place.

The Senior Cybersecurity Operations and Defense Director provides strategic leadership for organizational information security programs, including governance, risk management, cyber defense, and protection of enterprise assets. This role ensures resilience against threats, establishes security frameworks, and oversees compliance with regulatory and industry standards while leading cross-functional teams to implement and maintain robust defense capabilities.

Location

This position is located in our corporate HQ in Charlotte, NC.

KEY RESPONSIBILITIES

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Develop and execute enterprise-wide information security strategy aligned with organizational objectives.
• Oversee governance, risk, and compliance initiatives to ensure adherence to legal, regulatory, and internal standards.
• Lead development and implementation of security policies, standards, and guidelines across the organization.
• Direct vulnerability management, incident response, and threat detection operations to safeguard assets.
• Oversee AI enablement for Cyber Operations
• Partner with executive leadership, legal, and IT teams to manage security risks and maintain business continuity.
• Drive enterprise security awareness programs and influence adoption of best practices.
• Lead, mentor, and manage senior-level security professionals and cross-functional security initiatives.
• Develop security budgets, resource plans, and ensure ROI from security investments.

EDUCATION AND EXPERIENCE

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• Master’s degree in Cybersecurity, Information Assurance, or related discipline preferred.
• 12+ years of experience in information security or IT risk management roles.
• 7+ years of experience in leadership roles directing enterprise security functions.
• 3-5 years of experience in AI enablement for security operations, i.e. integration of AI security operations, automation, auto-triage; experience Security Copilot, Claude and/or ChatGPT
• Experience developing and implementing cybersecurity strategies and frameworks.
• Proven track record in incident response, security architecture, threat management, and compliance.

CERTIFICATIONS / LICENSES / REGISTRATIONS

• Certified Information Systems Security Professional (CISSP) preferred.
• Certified Information Security Manager (CISM) is desirable.
• Certified Information Systems Auditor (CISA) or equivalent risk/compliance certification preferred.

FUNCTIONAL SKILLS

• Strategic thinking and vision setting for cybersecurity programs.
• Advanced knowledge of security architecture, threat intelligence, and vulnerability management.
• Strong leadership and team development skills.
• Expertise in regulatory compliance frameworks such as NIST, ISO 27001, and SOC standards.
• Ability to influence executives and communicate complex security concepts effectively.

Proficiency in risk management and business continuity planning.