Director of Enterprise Security

Lead execution of the organization’s security strategy, including the security architecture design, security awareness training program, security documents (policies, standards, baselines, guidelines, and procedures), Third Party Risk Program and Disaster Recovery Plan, where appropriate. 

Lead the Information Security team, including hiring, coaching, performance management, and succession planning for security analysts and staff. 

Along with CISO, support development of a multi-year cybersecurity strategy and maturity roadmap aligned with business growth objectives, technology modernization initiatives, and emerging threats. 

Maintain up-to-date knowledge of the Information Security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors. 

Help build the business case for security investments; select and acquire additional security solutions or enhancements to existing security solutions to improve overall enterprise security as per the enterprise’s existing procurement processes. Oversee the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically. 

Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers and other systems and in databases and other data repositories. Ensure the enforcement of enterprise security policies and report on the organization’s security and risk posture to senior leadership and, as appropriate, the executive team. 

Help drive the organization’s AI governance and security program, including policies and controls for the secure and responsible use of AI tools and models, oversight of AI-related risk (e.g., data leakage, model abuse, third-party AI vendor risk), and partnership with legal, privacy, and business stakeholders on responsible AI adoption. 

Direct all investigations into problematic activity and own on-going communication with management, and direct the design and execution of vulnerability assessments, penetration tests and security audits. 

Serve as the executive sponsor for the security awareness training program to ensure consistently high levels of compliance with enterprise security policies and drive ongoing communications with various business groups to ensure enterprise-wide understanding of security goals, to solicit feedback and to foster co-operation. 

Own 3rd party relationships (MSSPs, etc.), including contract negotiation and strategic vendor management. 

Represent enterprise with business unit leaders, shaping the corporate security vision and securing their engagement in achieving enterprise security goals and corporate risk mitigation plans 

Perform any other related duties as required or assigned. 

Extensive experience in enterprise security architecture design and enterprise security document creation. 

Proven experience directly leading and managing a security team, including hiring, coaching, and performance management. 

Strong knowledge of the Microsoft security stack (e.g., Microsoft Entra ID, Defender, Sentinel, Purview) and Windows/enterprise network environments. 

Hands-on cloud security experience across AWS and Azure, including securing cloud-native applications and infrastructure (e.g., containers, serverless, IAM, and cloud workload protection). 

Experience developing AI governance and security programs, including policies for secure and responsible AI use and management of AI-related risk. 

Experience in designing and delivering employee security awareness training. 

Experience in developing Business Continuity Plans and Disaster Recovery Plans. 
Experience leading incident response and management for security events, including detection, containment, root-cause analysis, and post-incident reporting to leadership.