Sr. Director, Information Security

ICANN; Los Angeles (CA); On-site; USD 180,000 - 245,000; Full time

Benefits offered by this job

Bonus program

Benefits

Job summary

ICANN is seeking a Sr. Director of Information Security in Los Angeles to establish and lead the organization’s security vision, programs, and governance.

You will drive risk assessment, incident response, compliance, and technology oversight while shaping a security-first culture across ICANN. You will work with executive leaders and IT teams to implement controls, manage third-party risk, and foster collaboration across legal and compliance.

Qualifications

• Bachelor’s or Master’s degree in CS/IT/Engineering or related field.
• 15+ years in information security/IT leadership roles.
• 8+ years supervising teams and projects.
• Proven experience with incident response and crisis management.
• Strong knowledge of NIST CSF, ISO 27001, SOC 2, GDPR/CCPA.
• Fluent in English; additional languages preferred.

Responsibilities

• Develop and implement enterprise information security strategy aligned with business objectives.
• Oversee risk management, compliance, incident response, and security operations.

Skills

Security leadership

Risk management

Incident response

Regulatory compliance

Cloud security

Security architecture

Communication skills

Stakeholder management

Team leadership

English fluency

AI-driven security

Ethical hacking / pentesting

Education

Bachelor's or Master's in CS/IT/Engineering

CISSP

CISM

CISA

CCISO

English proficiency

Tools

SIEM

IDS/IPS

Encryption

Cloud security solutions

Firewalls

IAM

Job description

Job Summary: The Sr. Director of Information Security is responsible for establishing and maintaining the ICANN’s enterprise information security vision, strategy, and programs to ensure information assets and technologies are protected. This person will oversee security risk management, compliance, incident response, and cybersecurity initiatives while fostering a security-first culture across the organization.

Key Responsibilities & Duties:

• Security Strategy & Leadership: Develop and implement an enterprise-wide information security strategy aligned with business objectives.
• Risk Management: Identify, assess, and mitigate security risks while ensuring compliance with regulatory and industry standards.
• Cybersecurity Operations: Oversee information security operations, including threat intelligence, vulnerability management, and incident response.
• Compliance & Governance: Ensure adherence to security frameworks, policies, and industry regulations such as NIST CSF, ISO 27001, NIST SP 800 series, GDPR, CCPA, and SOC 2.
• Incident Response & Crisis Management: Lead efforts to detect, investigate, and remediate security incidents, ensuring minimal disruption to business operations.
• Security Awareness & Training: Foster a culture of security awareness by conducting employee training and implementing best practices.
• Technology & Architecture Oversight: Guide the selection, deployment, and management of security technologies, including firewalls, SIEM, endpoint protection, and IAM solutions.
• Collaboration & Stakeholder Engagement: Work closely with executive leadership, Engineering and Information Technology (E&IT), legal, and compliance teams to align security objectives with business needs.
• Third-Party Risk Management: Evaluate and monitor vendors, partners, and supply chains to manage information security risk.
• Budget & Resource Management: Develop and manage the cybersecurity budget, ensuring the efficient allocation of monetary, time and people resources.
• Incident Response: Provide expertise to Crisis Management Team; oversight and accountability for resolution of information security incidents.
• Mentorship: Encourage and facilitate the development of a significant knowledge base in others; may define role of staff members.
• Other duties as assigned or requested. Required Knowledge, Skills, and Abilities (KSAs): (Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions).
• Strong interpersonal communication skills and the ability to maintain effective working relationships with co-workers, vendors, business owners and the public are required.
• Hands-on experience with security technologies, including SIEM, IDS/IPS, encryption, and cloud security solutions.
• Strong knowledge of IT infrastructure, networking, and cloud environments.
• Proven track record in managing security incidents and crisis response.
• Exceptional leadership, communication, and stakeholder management skills.
• Experience in highly regulated industries such as finance, healthcare, or government.
• Familiarity with AI-driven security solutions and emerging threat landscapes.
• Background in ethical hacking, penetration testing, or red teaming.
• General understanding of all areas of ICANN's business and functional groups, including relevant industry issues.
• Demonstrated expertise in a diverse variety of IT process improvement concepts, practices, and procedures.
• Ability to effectively facilitate meetings at senior management level.
• Bachelor's or master's degree in computer science, IT, Engineering, or a related field.
• Minimum fifteen (15) years of experience in related field.
• Minimum eight (8) years of supervisory experience.
• Industry certifications such as CISSP, CISM, CISA, or CCISO.
• Fluency, both written and spoken, in English is required.
• ICANN is a global organization that values diversity; preference will be given to candidates with demonstrated skills in additional languages besides English.
• Work is performed in a normal office environment with limited privacy and some exposure to background noise.
• While performing the duties of this job, the employee is frequently required to stand and walk. The employee regularly is required to sit. The employee is frequently required to talk or hear; use hands and arms to reach, handle or feel. Specific vision abilities required by this job include close vision, color vision, and ability to adjust focus.
• The employee may occasionally lift and/or move up to 25 pounds.

Targeted Base Salary Low

180,000.00 + 20% Bonus + Benefits

Targeted Base Salary High

245,000.00 + 20% Bonus + Benefits

Note: The salary range provided here is a general estimation for the position at the time of posting based on the primary location. Salary ranges vary upon geographic regions and countries. Final compensation packages take into consideration of a variety of factors including but not limited to a candidate’s location, work experience, knowledge, skills and other compensable factors.