Senior Director, Cybersecurity Operations & Compliance

Ddn; Santa Clara (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Ddn in Santa Clara, CA, seeks an senior cybersecurity leader to drive governance, risk management, and incident response across hybrid environments.

You will own enterprise security strategy, lead diverse teams, and coordinate with IT, Legal, and Audit to enforce best practices and compliance across SOC 2, ISO 27001, and GDPR frameworks.

Qualifications

• 10+ years in cybersecurity operations with leadership experience.
• Proven enterprise cybersecurity strategy ownership with budgets.
• Hands-on expertise across a comprehensive cybersecurity program.
• Experience in hybrid on-prem and cloud environments (AWS/Azure/GCP).
• Familiarity with SOC 2, ISO 27001, GDPR, DORA.

Responsibilities

• Develop the compliance roadmap and lead SOC 2 and ISO 27001 programs.
• Collaborate to strengthen identity posture and AI governance guardrails.
• Lead End-User Services in deploying endpoint protection and conditional access.
• Develop and operate threat and vulnerability management.
• Manage threat hunting, event analysis, and incident response.
• Perform malware analysis and complex security investigations.
• Provide technical leadership for security platforms.
• Serve as final escalation for threat hunting, detection, and response.
• Oversee SIEM administration and security technology platforms.
• Lead incident containment and response.
• Integrate indicators of attack/compromise into systems.
• Manage threat intelligence sources.
• Partner with IT, Legal, Internal Audit to maintain security practices.
• Assist in selecting new information security technologies.
• Support development of information security team members.

Skills

Cybersecurity leadership

Incident response

Threat hunting

Security operations

Cloud security

SOC 2 / ISO 27001

Disaster recovery

Team management

Threat intelligence

Identity & Access Management

Tools

SIEM

Endpoint protection

Cloud platforms (AWS/Azure/GCP)

Job description

Roles and Responsibilities

• Develop the compliance roadmap and lead SOC 2 and ISO 27001 certification programs.

• Collaborate with the Identity and Access Management team to strengthen the company’s identity posture and AI governance guardrails.

• Direct the End-User Services team in deploying endpoint protection solutions, including mobile device management, conditional access, verified identity, and related security capabilities.

• Develop and operate a comprehensive threat and vulnerability management program.

• Develop and manage a comprehensive threat hunting, event analysis, and incident response capability.

• Perform detailed and complex security analysis, including malware analysis.

• Provide technical leadership for all relevant information security platforms.

• Serve as the final escalation point for threat hunting, event detection and analysis, and incident response.

• Oversee and directly participate in the administration of the firm’s SIEM and other relevant information security technology platforms.

• Lead the response to and containment of information security-related incidents.

• Ensure indicators of attack and indicators of compromise are promptly integrated into relevant systems and platforms.

• Manage threat intelligence sources, including both human-readable and machine-readable intelligence.

• Partner with IT, Legal, and Internal Audit to develop and maintain security best practices and policies for internal systems.

• Play a primary role in the selection of new information security technologies.

• Support the development of information security team members and facilitate knowledge transfer to other IT and firmwide groups.

Job Requirements

• 10+ years of experience in cybersecurity operations, including 5+ years leading cybersecurity teams at the manager, director, or higher level.

• Proven experience owning enterprise cybersecurity strategy, including capital and operating budgets.

• Deep hands‑on expertise across all aspects of a comprehensive cybersecurity program.

• Experience managing hybrid environments that span on‑premises or colocation infrastructure and at least one major cloud platform, such as AWS, Azure, or GCP.

• Deep knowledge of and experience with industry compliance programs, including SOC 2, ISO 27001, GDPR, DORA, and related frameworks.

• Strong foundation in disaster recovery, business continuity, and high‑availability architecture.

• Experience with infrastructure automation, configuration management, and modern operations practices.

• Track record of building, leading, and retaining high‑performing technical teams.

• Legally authorized to work in the United States.