Director, Information Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead a team of security engineers who provide managed security operations, incident response assistance, and security tools for clients.

• Establish operating standards for escalations, documentation, and overall service quality.

• Develop career pathways and technical development strategies for team members.

• Supervise alert triage, investigations, escalations, remediation tracking, and client reporting.

• Direct major incident responses, including communication with executives, coordination of containment efforts, and post-incident reporting.

• Collaborate with Legal, Corporate InfoSec, cyber insurance, and external DFIR partners.

• Oversee the operational efficiency of Rapid7, Microsoft Defender, Cisco Umbrella, and Mimecast.

• Assess new security technologies and explore opportunities for automation.

• Work with Engineering to enhance integrations between security, monitoring, and ticketing systems.

• Provide clients with guidance on risk mitigation, enhancing security posture, and preparing for incidents.

• Conduct QBRs, service reviews, and briefings for executives.

• Simplify complex security issues into understandable business terms.

• Assist with RFPs, proposals, and the design of security-related solutions.

• Establish ITIL- and SOC-compliant service delivery processes.

• Create KPIs and reporting systems for alert volumes, incident trends, response times, and tool performance.

• Identify and address gaps in staffing, tools, and client coverage.

⛳️ Requirements

• Bachelor’s degree in IT, Cybersecurity, Computer Science, or equivalent relevant experience.

• A minimum of 7 years in cybersecurity, security operations, or infrastructure security.

• At least 3 years of experience leading technical security teams.

• Experience in an MSP, MSSP, or client-facing technology services role.

• Comprehensive understanding of SOC operations, incident response, vulnerability management, and both cloud and on-premises infrastructure.

• Familiarity with Azure, networking, Active Directory, Entra ID, and Intune.

• Experience in a hands-on or leadership capacity with Rapid7, Microsoft 365 security tools, Defender, Cisco Umbrella, or Mimecast.

• Strong communication skills with executives, clients, and technical teams.

• Proven experience in leading managed SOC or MDR services.

• Knowledge of NIST CSF, CIS Controls, or ISO 27001 standards.

• Relevant certifications such as CISSP, CISM, Security+, CySA+, or equivalents.

• Experience with ServiceNow.

• Background in supporting legal, financial services, or other regulated industries.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• 401(k) retirement plan

• Paid Time Off (PTO)