Senior Cybersecurity Operations and Defense Director

100 CRC Insurance Group, LLC; Charlotte (NC); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Life, disability, AD&D insurance

401(k) with company match

Paid time off

Job summary

CRC Group in Charlotte, NC seeks a Senior Cybersecurity Operations and Defense Director to lead enterprise information security programs, governance, risk management, and cyber defense. You will set security strategy, oversee budgets, and drive cross‑functional initiatives to protect assets and ensure business continuity.

The role requires 12+ years in information security, 7+ years in leadership, and experience with AI-enabled security operations and regulatory compliance.

Qualifications

• Bachelor’s degree in IT or cybersecurity required.
• 12+ years in information security or IT risk management.
• 7+ years in leadership directing enterprise security.
• 3–5 years AI enablement for security operations (AI security copilots).
• Proven track record in incident response, threat management, and compliance.

Responsibilities

• Develop and execute enterprise-wide information security strategy.
• Oversee governance, risk, and compliance initiatives.
• Lead development and implementation of security policies and guidelines.
• Direct vulnerability management, incident response, and threat detection operations.
• Oversee AI enablement for Cyber Operations with cross‑functional teams.
• Drive security budgets and ROI, and mentor security professionals.

Skills

Leadership

Strategic thinking

Executive communication

Risk management

Regulatory compliance

Education

Bachelor's degree in Information Technology or Cybersecurity

Master's degree in Cybersecurity or Information Assurance (preferred)

Tools

CISSP

CISM

CISA

Job description

Regular or Temporary: Regular Language Fluency: English (Required)

Work Shift: 1st Shift (United States of America)

CRC Group is a leading, independent pure-play brokerage and underwriting specialty insurance distributor. Our culture puts people first, prioritizing long-term relationships, ethical decision-making, and continuous improvement. As a result of listening to our employees, CRC Group earned a Top Workplaces USA award three years in a row based solely on employee feedback and CRC Group is currently Great Place To Work Certified! If you want to work for a company where employees are valued and growth is encouraged, CRC Group could be the place.

The Senior Cybersecurity Operations and Defense Director provides strategic leadership for organizational information security programs, including governance, risk management, cyber defense, and protection of enterprise assets. This role ensures resilience against threats, establishes security frameworks, and oversees compliance with regulatory and industry standards while leading cross-functional teams to implement and maintain robust defense capabilities.

KEY RESPONSIBILITIES:

• Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.
• Develop and execute enterprise-wide information security strategy aligned with organizational objectives.
• Oversee governance, risk, and compliance initiatives to ensure adherence to legal, regulatory, and internal standards.
• Lead development and implementation of security policies, standards, and guidelines across the organization.
• Direct vulnerability management, incident response, and threat detection operations to safeguard assets.
• Oversee AI enablement for Cyber Operations Partner with executive leadership, legal, and IT teams to manage security risks and maintain business continuity.
• Drive enterprise security awareness programs and influence adoption of best practices.
• Lead, mentor, and manage senior‑level security professionals and cross‑functional security initiatives.
• Develop security budgets, resource plans, and ensure ROI from security investments.

EDUCATION AND EXPERIENCE

• Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• Master’s degree in Cybersecurity, Information Assurance, or related discipline preferred.
• 12+ years of experience in information security or IT risk management roles.
• 7+ years of experience in leadership roles directing enterprise security functions.
• 3-5 years of experience in AI enablement for security operations, i.e. integration of AI security operations, automation, auto‑triage; experience Security Copilot, Claude and/or ChatGPT
• Experience developing and implementing cybersecurity strategies and frameworks.
• Proven track record in incident response, security architecture, threat management, and compliance.

CERTIFICATIONS / LICENSES / REGISTRATIONS

• Certified Information Systems Security Professional (CISSP) preferred.
• Certified Information Security Manager (CISM) is desirable.
• Certified Information Systems Auditor (CISA) or equivalent risk/compliance certification preferred.

FUNCTIONAL SKILLS

• Strategic thinking and vision setting for cybersecurity programs.
• Advanced knowledge of security architecture, threat intelligence, and vulnerability management.
• Strong leadership and team development skills.
• Expertise in regulatory compliance frameworks such as NIST, ISO 27001, and SOC standards.
• Ability to influence executives and communicate complex security concepts effectively.
• Proficiency in risk management and business continuity planning.

General Description of Available Benefits for Eligible Employees of CRC Group:

At CRC Group, we're committed to supporting every aspect of teammates' well-being – physical, emotional, financial, social, and professional. Our best-in-class benefits program is designed to care for the whole you, offering a wide range of coverage and support.

Eligible full‑time teammates enjoy access to medical, dental, vision, life, disability, and AD&D insurance; tax‑advantaged savings accounts; and a 401(k) plan with company match.

CRC Group also offers generous paid time off programs, including company holidays, vacation and sick days, new parent leave, and more.

Eligible positions may also qualify for restricted stock units and/or a deferred compensation plan.

CRC Group supports a diverse workforce and is an Equal Opportunity Employer that does not discriminate against individuals on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status or other classification protected by law.

CRC Group is a Drug Free Workplace. EEO is the Law Pay Transparency Nondiscrimination Provision E-Verify Join CRC Group, a leader in specialty wholesale insurance, and take your career to new heights. We're a dynamic team dedicated to innovation, collaboration, and excellence.

Why CRC Group?

• Growth: Advance your career with our learning and leadership development programs.
• Innovation: Work in a forward‑thinking environment that values new ideas.
• Community: Be part of a supportive team that celebrates success together.
• Benefits: Enjoy competitive compensation, health benefits and retirement plans.

Who We’re Looking For

We seek passionate individuals who thrive in a fast‑paced, collaborative environment. If you value integrity and are driven to succeed, CRC Group is the place for you.