Information Security Director
CoorB · United States ·
- Work mode
- Remote
- Category
- Security
CoorB · United States ·
Leads the company’s cybersecurity program, setting strategy, architecture, and policies while overseeing threat detection, incident response, and risk management across cloud and on-prem environments.
Own the organization's overall security posture, including threat detection, incident response, vulnerability management, and endpoint/identity protection.
Direct security monitoring and incident investigation (e.g., EDR/SIEM alert triage, threat hunting, and formal incident reporting) and lead response to active threats.
Define andmaintainsecurity architecture standards across cloud (Azure, GCP), including network segmentation,firewall/NGFW policy, and Zero Trust Network Access (ZTNA).
Establish and enforce security policies covering access control, data protection, endpoint management, and acceptable use.
Build, lead, and develop the information security team, including hiring, coaching, performance management, and succession planning.
Set clear priorities,objectives, and accountability structures for security architects, analysts, IAM/GRC leads, and other direct reports.
Foster a collaborative, high-performingteamculture and support ongoing professional development and certification.
Manage team workload andresourcesto ensure adequate coverage for monitoring, incident response, and project delivery.
Define and own theorganization’ssecurity architecture and strategy.
Lead the design and implementation of security controls for networks, endpoints, applications, and cloud workloads, including secure-by-design reviews for new projects and technologies.
Set technical standards for security toolingselection, deployment, and integration, ensuring coverage across the full technology stack.
Evaluate emerging threats and technologies, adjusting the security roadmap to address new attack surfaces (cloud, AI, remote work, etc.).
Own the security incident response program end-to-end: detection, triage, containment, eradication, recovery, and post-incident review.
Establish andmaintainthe incident response plan, playbooks, and escalation procedures, andleadthe response to major security incidents and breaches.
Coordinate with legal, communications, and executive leadership onbreachnotification obligations and external disclosure requirements.
Drive continuous improvement of detection and response capabilities based on lessons learned, tabletop exercises, and threat intelligence.
Develop,maintain, and enforceorganizationinformation security policies, standards, and procedures (access control, acceptable use, data classification, incident response, vendor security, etc.).
Ensure policiesremainaligned with applicable regulatory and contractual requirements and are reviewed on a regularcadence.
Establish governance structures (security steering committee, policy exception processes) to ensure accountable, auditable decision-making.
Represent security in client, partner, and regulatory due-diligence engagements, including security questionnaires and audits.
Act as the primary liaison with internal and external auditors, coordinating audit scope, evidence collection, and remediation of findings across security and compliance audits.
Own theorganizationsecurity risk management program, including risk identification, assessment, treatment, and reporting.
Maintain the organization's risk register and ensure risk treatment plans have clear ownership, timelines, and executive visibility.
Report on the organization's security risk posture to executive leadership and the board on a regular basis, using clear, business-relevant metrics.
Own and manage theorganizationsecurity budget, including forecasting, prioritization, and return-on-investment analysis for security initiatives.
Build the business case for security investments, balancing risk reduction against cost and operational impact.
Details