Director, Cybersecurity

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and execute a thorough cybersecurity governance, risk, and compliance (GRC) program that encompasses risk management, adherence to regulations, and policy governance.

• Collaborate with various departments to ensure that risk management and compliance requirements are seamlessly incorporated into all enterprise operations.

• Perform comprehensive cybersecurity risk assessments across the organization, including evaluations of third-party and vendor risks for all relevant systems and business units.

• Create and uphold pertinent security policies and procedures.

• Educate applicable personnel on best practices in cybersecurity governance, risk, and compliance, while remaining informed about the latest regulatory changes and industry developments.

• Oversee internal and external audits and regulatory evaluations, and generate reports detailing the organization’s cybersecurity risk profile and compliance status for executive leadership and the board.

⛳️ Requirements

• A minimum of 5 years of experience in cybersecurity governance, risk management, or compliance.

• Preferred relevant certification (e.g., CISSP, CISM, CRISC, or CISA).

• Familiarity with risk management frameworks such as NIST CSF, ISO 27001, or COBIT.

• Practical experience with GRC platforms and tools (e.g., Archer, ServiceNow GRC, OneTrust, AuditBoard, or LogicGate).

• Experience in maintaining compliance with industry regulations and standards (e.g., HIPAA, SOC 2, PCI-DSS, GDPR).

• Strong analytical and critical thinking abilities.

🏝️ Benefits

• Health insurance

• 401(k) matching

• Time off

• Retirement plans

• Well-being programs

• Professional development opportunities