Director, Information Security Operations

This is a fully remote position, open to applicants in Idaho.

📋 Description

• Oversee and direct all facets of security operations, including monitoring, incident response, threat intelligence, vulnerability management, and operational readiness.

• Establish, maintain, and continuously enhance security KPIs, KRIs, dashboards, and scorecards.

• Evaluate team performance, adherence to SLAs, remediation progress, effectiveness of incident response, backlog status, control efficiency, and reduction of security risks.

• Set clear expectations, create measurable objectives, mentor team members, enhance execution consistency, and foster accountability and ongoing improvement.

• Facilitate regular operational reviews, identify obstacles, assign responsibilities, track commitments, and ensure completion.

• Implement and manage security monitoring tools and technologies to detect, assess, and respond to threats in real time.

• Leverage threat intelligence to improve defensive strategies, enhance detection capabilities, and increase incident response preparedness.

• Oversee vulnerability assessments and remediation efforts, including prioritization, assignment of responsibilities, SLA tracking, and mitigation efforts.

• Investigate security incidents, identify root causes, define corrective measures, and monitor improvements.

• Collaborate with IT, compliance, legal, engineering, product teams, and executive leadership.

• Lead initiatives in infrastructure and cybersecurity encompassing network, server and storage, endpoints, cloud, and related operational security controls.

• Identify opportunities for automation, process enhancements, workflow optimization, and measurable risk reduction.

⛳️ Requirements

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field.

• Over 10 years of experience in cybersecurity, including more than 5 years in a leadership capacity.

• Proven experience leading enterprise cybersecurity programs within a Microsoft-focused environment.

• Strong proficiency in creating impactful dashboards and KPIs to assess operational success.

• Experience in security operations, incident response, vulnerability management, cloud security, and identity management.

• Familiarity with cybersecurity frameworks, including NIST, CIS Controls, and SOCII/HITRUST.

• Demonstrated ability to convey technical concepts and risks to executive and business leaders.

• Experience in leading and advancing an information security program with measurable results and clearly defined performance expectations.

• Ability to define, implement, and manage cybersecurity KPIs, KRIs, dashboards, scorecards, SLAs, and operational performance reporting.

• Proven experience in building, mentoring, and leading high-performing teams.

• In-depth understanding of the competencies within the 8 Domains of the CISSP.

• Record of completing projects related to assessments, risk mitigation, control enhancements, vulnerability remediation, and security risk reduction.

• Strong critical thinking, problem-solving, prioritization, and decision-making abilities.

• Professional certifications such as CISSP, CISM, CRISC, or CCSP are preferred.

• Experience with AI platforms and services is a plus.

• Background in highly regulated organizations is preferred.

🏝️ Benefits

• Eligibility for annual cash bonuses.

• Medical insurance coverage.

• Dental insurance coverage.

• Vision insurance coverage.

• Life insurance coverage.

• 401(k) retirement plan.