Director, Security Enablement

This is a fully remote position, open to applicants in Texas.

📋 Description

• Facilitate weekly and monthly security operations reviews, scorecards, dashboards, and reports for executives.

• Establish and oversee security KPIs and KRIs, encompassing data quality, ownership, thresholds, trends, and reporting frequency.

• Manage security risks, issues, and deviations in Archer by tracking ownership, remediation plans, target dates, aging, and escalation.

• Monitor AWS security posture and risks associated with migration by integrating cloud security findings into governance metrics and leadership reports.

• Serve as the primary point of contact among Security, Engineering, Application Security, Legal, the Global Security Office, and business leaders.

• Oversee security communications and program implementation, including awareness initiatives, policy updates, and leadership briefings.

• Supervise security vendor Proof of Value tracking and Security FinOps reporting, which includes evaluation status, tooling expenses, license usage, renewals, and budget discrepancies.

• Convert security activities, trends, and risks into actionable insights for prioritization, investment, remediation, and escalation decisions.

• Keep abreast of emerging trends in AI and security, including tools, use cases, risks, and security implications.

• Report directly to the Senior Director.

⛳️ Requirements

• Over 10 years of experience in cybersecurity, security program management, security governance, technology risk, or a related discipline.

• More than 5 years of experience in a leadership role.

• A Bachelor's degree in Cybersecurity, Information Systems, Business, or a related field, or equivalent practical experience.

• Familiarity with enterprise GRC/IRM platforms like RSA Archer.

• Proven experience conducting recurring security operations reviews, action tracking, executive reporting, and KPI/KRI dashboards.

• Solid understanding of AWS security fundamentals, including IAM, Security Hub, Config, and WAF, or their equivalents.

• Experience working within 1LOD/2LOD risk frameworks.

• Background in coordinating programs across various business units in a matrixed setting.

• Proficiency in presenting to senior leadership.

• Preferred experience with security vendor assessments, CSPM/CNAPP, AppSec, DSPM, or Security FinOps.

• CISM, CRISC, CISSP, or AWS Certified Security - Specialty certifications are preferred.

🏝️ Benefits

• Competitive compensation package along with a bonus plan.

• Comprehensive medical, dental, and vision benefits.

• 401K matching program.

• Flexible work arrangements; options for remote, hybrid, or in-office work.

• Flexible paid time off, including volunteer time off, vacation, sick leave, and 12 paid holidays.