Director, Cybersecurity Operations

Celanese International Corporation•Irving, TX

About The Position

The Director, Cybersecurity Operations leads and evolves the company’s cybersecurity operations capabilities to proactively protect enterprise assets, information, and business operations. The role provides strategic and operational leadership across security monitoring and incident response, exposure management, business continuity and disaster recovery, security awareness, and managed security service providers. It ensures cyber risks are identified, managed, and remediated, and partners with executive leadership, IT, business stakeholders, and external partners to improve cyber resilience and deliver a high-performing security operations program aligned with business objectives and risk tolerance. The role is based in Irving, Texas. The Director oversees managed security service provider performance, enterprise threat detection and response, cyber readiness within business continuity and disaster recovery planning, vulnerability and application security practices, and the enterprise security awareness program. The role also partners with cybersecurity leadership on strategy, continuous improvement, automation, and operational efficiency; briefs executive leadership; and builds and leads a high-performing team of internal staff and service providers.

Requirements

At least 10 years of cybersecurity experience, with a significant focus on security operations and incident response.
Proven leadership experience managing global cybersecurity operations teams and/or managed security service providers.
Demonstrated experience across multiple domains, including SOC, incident response, vulnerability management, and security awareness.
Experience developing and executing cybersecurity operational strategies aligned with enterprise risk and compliance requirements.
Bachelor’s degree in Cybersecurity, Information Technology, or a related field; a master’s degree is preferred.
Strong understanding of threat detection technologies, including SIEM, EDR/XDR, and SOAR, and incident response methodologies.
Expertise in vulnerability management, application security, and exposure management practices.
Familiarity with business continuity and disaster recovery frameworks and their integration with cybersecurity.
Working knowledge of threat intelligence, attack frameworks such as MITRE ATT&CK, and adversary tactics.
Experience aligning cybersecurity operations with frameworks such as NIST CSF, ISO 27001, NIS2, or similar.
Strong understanding of operational metrics, SLAs, KPIs, and audit and regulatory expectations.
Strong executive communication and stakeholder management skills.
Ability to translate technical risk into business impact and actionable insights.
Experience leading cross-functional teams and influencing without direct authority.
Proven ability to drive change, operational maturity, and continuous improvement.

Nice To Haves

Master’s degree in Cybersecurity, Information Technology, or a related field.
Industry certifications such as CISSP, CISM, GIAC, or equivalent.

Responsibilities

Govern the performance, delivery, and continuous improvement of managed security service providers, including MDR, SOC, and vulnerability management providers.
Define and enforce service-level agreements, key performance indicators, and outcome-driven metrics aligned to business risk.
Ensure escalation, incident handling, and reporting processes are in place and effective.
Oversee enterprise threat detection, monitoring, and incident response capabilities, including SIEM, EDR, and threat intelligence integration.
Ensure incident response readiness and effectiveness, coordinating with crisis management and external partners.
Advance detection engineering, threat hunting, and response orchestration to reduce dwell time and improve response outcomes.
Provide executive-level reporting on the threat landscape, incident trends, and response effectiveness.
Govern cybersecurity alignment with enterprise business continuity and disaster recovery planning.
Integrate cyber incident scenarios into business continuity and disaster recovery plans and ensure they are tested through exercises.
Coordinate with IT and business stakeholders to validate recovery capabilities and resilience objectives.
Lead enterprise exposure management, including vulnerability identification, prioritization, and remediation governance.
Oversee application security practices, including secure SDLC integration and application risk assessments.
Partner with infrastructure and application owners to ensure timely remediation of identified risks.
Drive adoption of continuous threat exposure management principles.
Oversee the design and execution of the enterprise security awareness program, including phishing simulations and targeted training.
Measure and report on human risk reduction metrics and program effectiveness, and foster a security-aware culture.
Partner with cybersecurity leadership to define and execute the strategic roadmap for cybersecurity operations capabilities.
Identify opportunities to enhance automation, AI-driven detection and response, and operational efficiency.
Drive continuous improvement across people, process, and technology.
Serve as a key liaison between cybersecurity, IT, business units, and external partners.
Provide regular executive briefings on operational risk, program maturity, and performance.
Build and lead a high-performing team, including internal staff and service providers.