Want to know if this job is worth applying to?
United States
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Director - Information Security based in the United States.
This senior leadership role oversees the development and execution of enterprise-wide information security programs across a complex organization.
You’ll serve as a strategic advisor to executive leadership, helping shape security strategy, reduce organizational risk, and protect critical systems and data.
The role spans security governance, risk management, incident response, cloud security, third-party risk, and secure software development.
You’ll work closely with business and technology leaders to embed security into enterprise processes and strategic initiatives.
The position also provides expert guidance on regulatory assessments, security audits, contract requirements, and federal, state, and commercial proposals.
Success requires strong executive communication, deep security expertise, independent judgment, and the ability to lead cross-functional initiatives.
This is a high-impact opportunity to influence security strategy and strengthen resilience across a distributed, enterprise-level environment.
Act as a delegate and representative of the Corporate Security Officer, supporting executive initiatives and enterprise information security strategy.
Develop, maintain, and continuously improve enterprise security policies, standards, procedures, and incident response plans in alignment with industry best practices and applicable compliance requirements.
Lead enterprise-wide security initiatives, including risk assessments, incident response coordination, cloud security evaluations, and secure software development lifecycle (DevSecOps) programs.
Provide expert technical and written responses to security-related requirements within federal, state, and commercial contract proposals.
Present security posture assessments, enterprise risk summaries, recommendations, and investment justifications to senior executives and key stakeholders.
Build strong partnerships with business units and IT leadership to integrate security considerations into organizational processes, technology initiatives, and strategic decisions.
Oversee supply chain and third-party vendor risk management programs, ensuring vendors and partners align with enterprise security objectives.
Coordinate and facilitate internal and external security audits, enterprise risk assessments, and regulatory compliance reviews.
Identify emerging security risks and opportunities for strengthening organizational controls, resilience, and compliance.
Operate independently within broad organizational policies and practices, escalating complex issues when clarification of established procedures or policies is required.
Master’s degree required; relevant experience may be considered where permitted by the organization.
15+ years of professional experience in information security, cybersecurity, risk management, or a closely related field.
CISSP or an equivalent information security certification required.
CISM certification preferred.
Certified Cloud Security Professional (CCSP) certification preferred.
GIAC Security Leadership Certification (GSLC) preferred.
Extensive experience developing and executing enterprise information security strategies, programs, policies, and governance frameworks.
Strong knowledge of security risk management, regulatory compliance, incident response, cloud security, DevSecOps, and third-party/vendor risk.
Demonstrated ability to lead complex, cross-functional security initiatives involving business and technology stakeholders.
Strong executive communication skills, with the ability to translate complex security risks and technical concepts into clear, actionable recommendations.
Experience supporting security audits, risk assessments, regulatory reviews, and contractual or proposal security requirements.
Strong strategic thinking, analytical judgment, problem-solving, and decision-making skills.
Ability to build trusted relationships across organizational levels and influence stakeholders without relying solely on direct authority.
Comfortable working independently and managing broad responsibilities with limited day-to-day supervision.
Annual salary range of $130,669–$198,029, depending on qualifications, experience, and other applicable factors.
Remote work arrangement, with the position listed as home-based in the United States.
Opportunity to operate at an enterprise level and influence information security strategy across multiple business and technology functions.
Exposure to complex security, compliance, risk, cloud, vendor, and regulatory initiatives.
Senior-level opportunity to partner directly with executive leadership and business stakeholders.
Employment contingent upon successful completion of required pre-employment background and drug screening.
Equal employment opportunity workplace committed to inclusion and nondiscrimination.
Drug-free workplace environment.
