Senior Director – Cyber Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the daily operations of Hornblower’s information security program.

• Manage daily security functions, including alert triage, case management, and incident response.

• Ensure continuous monitoring and response availability through internal personnel and the MDR/MSSP provider.

• Cultivate the relationship with the MDR/MSSP to meet service levels and performance metrics.

• Act as the primary escalation point for the security team, including during off-hours.

• Generate KPI and metrics reports for the CISO and executive leadership.

• Lead incident response efforts from detection to recovery and conduct post-incident reviews.

• Facilitate tabletop exercises at least once a year.

• Supervise vulnerability assessment and management, encompassing scanning, patch timelines, remediation tracking, and reporting.

• Oversee the security architecture and roadmap across identity, endpoint, email, network, and cloud utilizing Microsoft 365 E5.

• Manage identity and access for a large seasonal workforce.

• Secure various locations, including offices, ticket booths, shared kiosks, mobile ticket scanners, tablets, vessels, and IoT/OT systems.

• Assess the security tool portfolio to minimize redundancy and costs.

• Lead PCI DSS and SOC 2 initiatives while supporting ISO 27001 compliance.

• Prepare documentation and responses for auditors, assessors, and regulators.

• Maintain the enterprise security risk register and report risks to leadership and the board.

• Manage third-party risks associated with vendors processing payment and customer data.

• Comply with maritime cybersecurity requirements for passenger vessels under 33 CFR.

• Develop and uphold security operations procedures and runbooks.

• Drive security awareness initiatives for a predominantly seasonal workforce.

• Engage in IT and business projects that impact security.

⛳️ Requirements

• At least eight years of experience in information security.

• Minimum of three years in a leadership role within a security team or function at a multi-site organization.

• Bachelor's degree in information security, computer science, or a related field, or equivalent experience.

• Practical experience with Microsoft 365 E5 security features, such as Entra ID, Conditional Access, Defender XDR, Intune, Purview, and Sentinel.

• Proven experience in managing an MDR or MSSP provider against service level agreements and measurable results.

• Familiarity with operating within a security operations center or a 24x7 service environment, including adherence to SLAs.

• Strong understanding of attack techniques, vulnerabilities, and experience with SIEM, log analysis, and ticketing tools.

• Experience in owning PCI DSS compliance as a merchant and leading SOC 2 audits, including preparation of evidence and collaboration with assessors.

• Experience in leading incident response efforts, including ransomware, phishing, or social engineering incidents.

• Working knowledge of network security principles, including firewalls, intrusion detection and prevention, segmentation, and secure remote connectivity.

• Excellent analytical, leadership, coaching, and performance management skills, with the ability to communicate risk to non-technical executives.

• Willingness to participate in after-hours escalation for critical security incidents.

🏝️ Benefits

• 24x7 security monitoring and response coverage.

• On-call and escalation schedules.

• Involvement in security operations and leadership for incident response.