Information Security Director

Our client is seeking an experienced and hands-on cybersecurity leader to define, implement, and continuously enhance its enterprise security program. Reporting to the VP of IT, this role combines strategic leadership with operational execution across cybersecurity governance, risk management, cloud security, identity management, compliance, and incident response. The successful candidate will play a critical role in protecting the organization's digital assets, supporting business growth, and ensuring a robust security posture within a highly regulated environment.

• Develop, implement, and continuously enhance the company's cybersecurity strategy, ensuring alignment with business objectives, regulatory requirements, and industry best practices.
• Lead cybersecurity governance, risk management, and compliance programs, including policy development, risk assessments, internal controls, and audit readiness.
• Own the security architecture across cloud, infrastructure, applications, endpoints, and collaboration platforms, with a strong focus on Microsoft 365 and Entra ID environments.
• Oversee identity and access management (IAM) processes, ensuring secure user provisioning, privileged access controls, and authentication standards.
• Direct security operations, including threat detection, vulnerability management, incident response, and remediation activities in collaboration with internal and external partners.
• Manage cybersecurity third-party service providers, including MSSPs, security consultants, penetration testing firms, and technology vendors.
• Lead business continuity, disaster recovery, and cyber resilience initiatives to ensure operational preparedness and rapid recovery capabilities.
• Establish and monitor cybersecurity KPIs and metrics, providing regular executive-level reporting and recommendations to leadership.
• Drive data protection, privacy, and information security initiatives, ensuring appropriate safeguards for critical business and research data.
• Evaluate emerging technologies, including AI-related risks and controls, to ensure secure adoption and governance.
• Promote a strong cybersecurity culture through awareness programs, employee education, and stakeholder engagement across the organization.