Director, Cyber Operations

$212,000 - $212,000/Yr

Loandepot - Irvine, CA

Full-time - Senior

Irvine, CA

Credit Intermediation and Related Activities

About the position

The Director of Cyber Operations at loanDepot is responsible for leading the organization's Cyber Incident Response program and Global Cyber Security Operations Center. This role requires strong leadership, a deep understanding of technology, and the ability to operate strategically while managing day-to-day operations. The Director will ensure timely responses to security threats, collaborate with various stakeholders, and develop comprehensive incident response strategies.

Responsibilities

• Lead the day-to-day operations of the Cyber Incident Response program and Global Cyber Security Operations Center.
• Serve as a subject matter expert in cyber forensics and incident response processes.
• Ensure timely and appropriate responses to security threats and incidents.
• Manage and mature the people, processes, and technologies in a 24x7 global security operations center.
• Collaborate with Crisis Management and Business Continuity teams to support security initiatives and resilience testing.
• Develop and direct the Enterprise Incident Response Program for continuous maturity.
• Define and maintain dashboards and metrics for Incident Response Program and Cyber Security Operations Center maturity efforts.
• Provide cyber security briefings and consultancy to technical and executive leadership teams.
• Conduct cyber table-top simulations and educational sessions with stakeholders.
• Lead incident response investigations and coordinate response activities.

Requirements

• Demonstrated knowledge of compliance with state and federal regulations related to the position.
• Strong knowledge of security technologies architecture and operation.
• Deep understanding of attack techniques and vulnerability management methodologies.
• Knowledge of the incident response lifecycle including containment, eradication, and recovery.
• Technical background in enterprise networking, firewall, storage, server infrastructure, operating systems, and database technologies.
• Understanding of security standards and frameworks such as OWASP, PCI-DSS, SOX-404, and SOC2.
• Ability to discern patterns from large amounts of disparate information.
• Experience with tools and techniques in security event analysis and incident response.

Nice-to-haves

• Advanced certification in cyber security (CISSP, GCIH, GCFE, GCIA, CISM).
• Experience in a highly regulated industry (banking, finance, investments).
• Experience assessing risk and implementing mitigation controls.

Benefits

• Wellness program
• Health insurance
• Dental insurance
• Tuition reimbursement
• Paid time off
• Vision insurance