Director, IT Security – Strategy & Transformation

Work Arrangement: Hybrid – 8 days per month onsite
Employment Type: Full-Time

Job Summary

We are seeking an experienced Director of IT Security Strategy & Transformation to lead enterprise security strategy, governance, and transformation initiatives. This leadership role requires extensive experience in cybersecurity, enterprise risk management, regulatory compliance, operating model design, and executive stakeholder engagement.

Key Responsibilities

• Develop and execute enterprise security strategies, multiyear roadmaps, and investment priorities.
• Establish and monitor security KPIs, OKRs, maturity models, and risk-reduction initiatives.
• Lead security transformation programs and operating model improvements.
• Partner with the CISO, CIO, CTO, and senior leadership on security strategy and governance.
• Integrate privacy, compliance, regulatory readiness, and risk management into security programs.
• Guide the secure adoption of cloud, AI/ML, automation, and emerging technologies.
• Oversee strategic initiatives involving IAM, cloud security, vulnerability management, insider risk, and resilience.
• Drive organizational change, cross-functional collaboration, and continuous improvement.
• Develop executive-level presentations, dashboards, and reports covering security performance and risk.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Risk Management, Business Administration, or a related field.
• 10+ years of experience in security strategy, cybersecurity transformation, technology risk, program leadership, management consulting, or related disciplines.
• Proven experience working with CISO, CIO, CTO, or equivalent executive leaders.
• Experience designing and governing enterprise security programs.
• Strong knowledge of operating model design, portfolio governance, strategic planning, and KPI-driven performance management.
• Knowledge of cybersecurity and governance frameworks, including NIST CSF, NIST 800-53, ISO 27001, COBIT, SOX, HIPAA, and PCI DSS.
• Experience leading enterprise transformation and cross-functional strategic initiatives.
• Strong understanding of regulatory compliance, privacy, risk management, and security governance.
• Excellent executive communication, analytical, presentation, and stakeholder management skills.

Preferred Qualifications:

• Master's degree in Cybersecurity, Information Systems, Business Administration, or a related field.
• CISSP, CISM, CRISC, CGEIT, PMP, or equivalent certification.
• Experience in highly regulated industries.
• Experience with enterprise AI governance and responsible AI initiatives.

Candidates must be comfortable with the stated hybrid work arrangement.