Senior Director, Information Security (Relocation eligible)

Solving IT; Nashville (TN); On-site; USD 180,000 - 260,000; Full time

Job summary

Solving IT is seeking a Senior Director, Information Security (CISO) to lead the enterprise cybersecurity strategy, governance, and risk management across a large, multi-site organization. This executive role partners with business and technology leaders to protect critical systems and data while enabling secure digital transformation.

The role provides strategic direction for security operations, regulatory compliance, incident response, business continuity, and third-party risk management,

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related discipline.
• 12+ years of progressive experience in cybersecurity, information technology, or enterprise risk management.
• Minimum of 5 years leading enterprise cybersecurity programs in a senior leadership or executive capacity.
• Demonstrated experience developing and executing enterprise information security strategies.
• Deep knowledge of cybersecurity frameworks including NIST, ISO 27001, CIS Controls, and regulatory compliance standards.
• Experience leading Security Operations, Incident Response, Vulnerability Management, IAM, and GRC programs.

Responsibilities

• Develop and execute the enterprise information security strategy aligned with business and technology objectives.
• Establish and maintain cybersecurity policies, standards, governance, and security control frameworks.
• Drive continuous improvement of the organization's cybersecurity maturity through strategic initiatives and measurable outcomes.
• Partner with executive leadership to ensure security supports innovation, growth, and operational excellence.
• Lead enterprise cybersecurity risk management, including identification, assessment, mitigation, and reporting of technology risks.
• Ensure compliance with industry security frameworks and regulatory requirements such as NIST, ISO 27001, GDPR, and other applicable standards.
• Oversee internal and external security audits, risk assessments, and remediation efforts.
• Present cybersecurity risks, trends, and recommendations to executive leadership and governance committees.

Skills

Cybersecurity leadership

Executive communication

Strategic planning

Stakeholder management

GRC

Regulatory compliance

Education

Bachelor's degree in Computer Science / Information Technology / Cybersecurity / Information Systems

Master's degree in Cybersecurity / IT / Business Administration

Job description

Senior Director, Information Security (CISO)

Position Summary:

The Senior Director, Information Security (CISO) is responsible for leading the enterprise cybersecurity strategy, governance, and risk management program across a large, multi-site organization. This executive leader partners with business and technology stakeholders to protect critical systems, applications, and data while enabling secure digital transformation initiatives.

The role provides strategic direction for cybersecurity operations, regulatory compliance, incident response, business continuity, and third-party risk management. The Senior Director, Information Security (CISO) leads and develops high-performing security teams, establishes enterprise security standards, and serves as a trusted advisor to executive leadership on cybersecurity strategy and organizational risk.

Key Responsibilities

Cybersecurity Strategy & Leadership

• Develop and execute the enterprise information security strategy aligned with business and technology objectives.
• Establish and maintain cybersecurity policies, standards, governance, and security control frameworks.
• Drive continuous improvement of the organization's cybersecurity maturity through strategic initiatives and measurable outcomes.
• Partner with executive leadership to ensure security supports innovation, growth, and operational excellence.
• Lead enterprise cybersecurity risk management, including identification, assessment, mitigation, and reporting of technology risks.
• Ensure compliance with industry security frameworks and regulatory requirements such as NIST, ISO 27001, GDPR, and other applicable standards.
• Oversee internal and external security audits, risk assessments, and remediation efforts.
• Present cybersecurity risks, trends, and recommendations to executive leadership and governance committees.

Security Operations & Incident Response

• Provide executive oversight of Security Operations Center (SOC) activities, vulnerability management, threat detection, and incident response.
• Lead enterprise cyber incident response planning, execution, and post-incident reviews.
• Develop and maintain disaster recovery and business continuity strategies focused on cyber resilience.
• Monitor the evolving threat landscape and implement proactive security measures to reduce organizational risk.

Security Architecture & Technology

• Partner with infrastructure, application development, cloud, and enterprise architecture teams to integrate security into technology initiatives.
• Evaluate emerging cybersecurity technologies and recommend strategic investments.
• Ensure security is embedded throughout system design, application development, cloud platforms, and infrastructure operations.

Vendor & Third-Party Risk

• Establish cybersecurity requirements for vendors, suppliers, and strategic partners.
• Oversee third-party security assessments and ongoing risk monitoring.
• Strengthen supply chain security through governance, due diligence, and continuous evaluation.

Leadership & Team Development

• Lead, mentor, and develop high-performing cybersecurity leaders and technical teams.
• Foster a culture of accountability, collaboration, continuous learning, and operational excellence.
• Support succession planning, workforce development, and talent acquisition for the cybersecurity organization.

Executive Communication

• Serve as the primary cybersecurity advisor to executive leadership.
• Translate complex technical risks into clear business recommendations.
• Deliver executive-level reporting on cybersecurity posture, emerging threats, compliance, and strategic initiatives.
• Promote security awareness through enterprise-wide education and communication programs.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related discipline.
• 12+ years of progressive experience in cybersecurity, information technology, or enterprise risk management.
• Minimum of 5 years leading enterprise cybersecurity programs in a senior leadership or executive capacity.
• Demonstrated experience developing and executing enterprise information security strategies.
• Deep knowledge of cybersecurity frameworks including NIST, ISO 27001, CIS Controls, and regulatory compliance standards.
• Experience leading Security Operations, Incident Response, Vulnerability Management, Identity & Access Management (IAM), and Governance, Risk & Compliance (GRC) programs.
• Proven success leading cross-functional teams within complex, enterprise environments.
• Strong executive communication, stakeholder management, and strategic planning skills.

Preferred Qualifications

• Master's degree in Cybersecurity, Information Technology, Business Administration, or a related field.
• Professional certifications such as CISSP, CISM, CISA, CRISC, or equivalent.
• Experience supporting global or multinational organizations.
• Experience with cloud security, zero trust architecture, and modern cybersecurity technologies.
• Familiarity with business continuity planning and disaster recovery programs.

Technical Expertise

• Enterprise Cybersecurity Strategy
• Information Security Governance
• Security Operations (SOC)
• Vulnerability Management
• Security Architecture
• Identity & Access Management (IAM)
• Governance, Risk & Compliance (GRC)
• Third-Party Risk Management
• Business Continuity & Disaster Recovery
• Security Awareness Programs
• Executive Reporting & Board Presentations
• Regulatory Compliance (NIST, ISO 27001, GDPR, CIS)
• Executive leadership and strategic planning