Senior Director - Cyber Security

CBTS; Columbus (OH); On-site; USD 180,000 - 280,000; Full time

Job summary

CBTS is seeking a Senior Director of Cyber Security in Columbus, OH to lead the security program, drive maturity, and oversee vulnerability management. You will mentor managers, align initiatives with business goals, and communicate security strategy to executives.

The role requires extensive leadership experience, strategic vision, and hands-on governance of security controls, audits, and compliance across the enterprise.

Qualifications

• Bachelor’s Degree in Computer Science or Information Technology or equivalent, relevant work experience.
• One or more field related professional technical certifications (CISSP, CISA, CISM, CRISC).
• 1 cloud certification- AWS cloud practitioner, Microsoft Azure Fundamentals or Google Cloud- Cloud Digital Leader
• 15-17 years of experience in Information Security, IT Audit, Cloud Security, or Risk Management.
• 9+ years of leadership experience.

Responsibilities

• Provide strategic direction and oversight for the Cyber Security team's strategy and vision. Lead and mentor a team of Cyber Security managers and their direct reports, ensuring alignment with organizational goals.
• Champion and drive innovation by staying ahead of emerging technical developments. Facilitate cross-departmental collaboration and act as a change leader, aligning security initiatives with organizational drivers.
• Design and oversee the implementation of vulnerability management and penetration testing frameworks to identify and mitigate security weaknesses.
• Communicate security goals and initiatives to senior leaders using presentations in PowerPoint/Visio; exhibit negotiation skills.
• Lead design and execution of IT projects aligned with long-term security strategy; identify gaps and develop new processes.
• Ensure operational effectiveness by refining internal processes and maintaining documentation; manage budgets.
• Collaborate with Change Advisory Board to assess changes; develop KPIs and actionable security metrics.
• Partner with executives on strategic security plans to protect assets and enable business objectives.
• Oversee regulatory compliance, risk management frameworks, audits and assessments.

Skills

Leadership

Strategic planning

Communication

Change management

Education

Bachelor's Degree in CS/IT

CISSP/CISA/CISM/CRISC certifications

Cloud certifications (AWS/Azure/GCP)

Tools

PowerPoint

Visio

Job description

The Senior Director, Cyber Security will drive the Cyber Security team and responsible for understanding the business model and organizational priorities, while leading, guiding and directing technical and business leaders in effort to ensure compliance to regulatory requirements, the protection of company information assets, and the continued maturation of the cyber security program. This role includes overseeing vulnerability management and penetration testing efforts to identify and address security weaknesses. The Senior Director will also ensure these processes are integrated into the overall cyber security strategy, contributing to a robust and proactive defense posture.

Essential Job Functions

• Provide strategic direction and oversight for the Cyber Security team's strategy and vision. Lead and mentor a team of Cyber Security managers and their direct reports, ensuring alignment with organizational goals. Drive recruitment, development, and performance evaluation processes, leveraging subject matter expertise to foster team growth. - (25%)
• Champion and drive innovation by staying ahead of emerging technical developments. Facilitate cross-departmental collaboration and act as a change leader, aligning security initiatives with organizational drivers and ensuring successful implementation across the enterprise. - (10%)
• Design and oversee the implementation of comprehensive vulnerability management and penetration testing frameworks to systematically identify, evaluate, and mitigate security weaknesses across all company assets. - (10%)
• Effectively communicate security goals and initiatives to senior leaders and stakeholders. Develop and deliver presentations tailored to diverse audiences, utilizing tools like Microsoft PowerPoint and Visio. Exhibit advanced negotiation and communication skills to influence and engage stakeholders. - (10%)
• Lead the design and execution of key IT projects aligned with the organization's long-term security strategy. Identify gaps in existing processes and spearhead the development of new, effective processes. Navigate ambiguity and deliver high-quality results in complex environments. - (10%)
• Ensure the operational effectiveness of the Cyber Security team by maintaining and refining internal processes and procedures. Oversee the creation and upkeep of critical documentation, including run books and technical requirements. Manage departmental budgets and optimize cost-efficiency. - (5%)
• Engage with the Change Advisory Board to assess and manage changes impacting Cyber Security controls. Develop and refine Key Performance Indicators (KPIs) to measure security performance. Lead efforts in data analysis to produce actionable metrics that drive continuous improvement. - (5%)
• Collaborate with senior executives on strategic and tactical security plans, ensuring robust protection of assets and adherence to standards. Serve as a trusted advisor, resolving conflicts, simplifying complex security concepts, and offering strategic options to enable business objectives. - (15%)
• Oversee the organization's compliance with relevant regulatory requirements, industry standards, and internal policies. Develop and implement risk management frameworks to identify, assess, and mitigate security risks. Ensure that the organization's security posture aligns with legal and regulatory obligations, and lead audits and assessments to demonstrate compliance. - (10%)

Minimum Qualifications

• Bachelor’s Degree in Computer Science or Information Technology or equivalent, relevant work experience
• One or more field related professional technical certifications (CISSP, CISA, CISM, CRISC)
• 1 cloud certification- AWS cloud practitioner, Microsoft Azure Fundamentals or Google Cloud- Cloud Digital Leader
• 15-17 years of experience in Information Security, IT Audit, Cloud Security, or Risk Management.
• 9+ years of leadership experience.

Preferred Qualifications

• Master’s Degree in Computer Science or Information Technology or equivalent, relevant work experience
• Two or more field related professional technical certifications (CISSP, CISA, CISM, CRISC)
• 17-19 years of experience in Information Security, Cloud Security, Technical Controls, Risk Management.