Director Cybersecurity

Bridgewater Bank • St Louis Park, MN

1d • Hybrid

About The Position

Bridgewater Bank is seeking a hands-on Director of Cybersecurity to lead the design, implementation, operation, and continuous improvement of the bank’s cybersecurity architecture, engineering, and technology controls. The role combines strategic leadership with direct technical involvement across Azure, Microsoft 365, hybrid infrastructure, identity, SaaS platforms, applications, APIs, integrations, automation, and defensive security technologies. The Director develops and executes cybersecurity capabilities aligned to the NIST Cybersecurity Framework, including security architecture, identity and access management, security operations, threat and vulnerability management, incident response, and cyber resilience.

The Director leads technology security controls that protect the bank’s systems, applications, data, and customers. The position partners with the Information Security Officer, Internal Audit, Compliance/ERM, and technology and business leaders to align cybersecurity operations with governance, risk management, and regulatory expectations. It also leads technology control assurance, supports audits and regulatory examinations, coordinates control testing across IT teams, and drives remediation and issue closure.

Bridgewater Bank describes itself as an entrepreneurial bank serving the Twin Cities, with a fast, lean, evolving environment and an award-winning culture focused on growth. The position offers a hybrid work model. The typical annual base pay range is $144,500–$190,000, with eligibility for a discretionary annual incentive program based on organizational and individual performance. Benefits include healthcare, life and disability insurance, parental leave, a 401(k) with employer match, paid vacation, and paid holidays.

Requirements

• At least 8 years of progressive experience in cybersecurity, cloud or infrastructure engineering, enterprise architecture, security architecture, or related technology disciplines, including experience in a highly regulated environment.
• At least 3 years of technical leadership, architecture ownership, or team leadership experience, with the ability to mentor engineers while remaining hands-on with complex technical work.
• Deep experience designing, implementing, and operating cybersecurity controls across Microsoft Azure, Microsoft 365, identity and access management, data protection, and cloud security platforms, including Microsoft Defender, Purview, Entra ID, and Conditional Access.
• Demonstrated experience securing hybrid infrastructure, cloud platforms, SaaS applications, networks, endpoints, web applications, and APIs through architecture, monitoring, vulnerability management, and control implementation.
• Strong understanding of security operations, threat intelligence, incident response, vulnerability management, penetration testing, security monitoring, SIEM/SOAR, and root-cause analysis.
• Demonstrated ability to develop technology standards, reference architectures, roadmaps, resilience strategies, configuration baselines, diagrams, and runbooks, and to evaluate vendors, solutions, and emerging technologies.
• Experience supporting technology control programs in highly regulated environments, including NIST-based frameworks, internal and external audits, regulatory examinations, issue remediation, and GRC tools such as Optro.
• Strong understanding of resilient architecture, business continuity, disaster recovery, backup protection, recovery testing, and security considerations for high-availability services.
• Strong written and verbal communication skills and ability to translate complex technical issues into clear risk, business impact, options, and recommendations for technical teams, executives, auditors, regulators, and Board-level audiences.

Nice To Haves

• Financial services experience is strongly preferred.
• Industry certification such as CISSP, CCSP, CISM, GIAC, Microsoft Cybersecurity Architect Expert, Azure Solutions Architect Expert, or equivalent is preferred.

Responsibilities

• Lead technical architecture, standards, strategic roadmaps, vendor evaluation, and technology investment recommendations across Azure, Microsoft 365, hybrid infrastructure, SaaS platforms, web technologies, APIs, integrations, automation, and application enablement.
• Own technical strategy and control design for Microsoft Entra ID/Azure AD, identity and access management, Conditional Access, phishing-resistant multifactor authentication, single sign-on, SAML/OIDC federation, SCIM/JIT provisioning, privileged access, service identities, and joiner-mover-leaver lifecycle controls.
• Lead technical cybersecurity incident response, including preparation, detection, containment, eradication, recovery, lessons learned, and coordination with the Information Security Officer and Bank’s Leadership Team.
• Collaborate with IT teams and the Information Security Officer to design and implement security strategies, controls, monitoring, vulnerability management, and reporting.
• Lead threat intelligence meetings and oversee collection and analysis of relevant security information to proactively mitigate risks.
• Define and operate a technology control testing program covering design and operating effectiveness, aligned to NIST CSF; coordinate testing across IT and control owners and report results, themes, and remediation needs.
• Manage technology audit and examination workflows, including coordination through Optro, remediation planning, issue tracking, corrective-action validation, and closure reporting.
• Manage penetration test reporting and governance, including provider scoping and deliverables, stakeholder communications, remediation tracking, and retesting and closure.
• Develop and deliver technology risk, controls, and audit status reporting to the Information Security Officer, CIO/CTO, ERM/Risk, Compliance, Internal Audit, and management or Board-level committees as applicable; escalate emerging risks and control gaps with recommendations.
• Lead technical cybersecurity assessments of third-party technology providers and partner with business and operational leaders to evaluate risk and implement appropriate controls.
• Serve as a technical resource for access controls, data loss prevention, SIEM/SOAR, and cloud, network, and endpoint security.
• Own technology audit readiness and response, serving as the primary coordination point for Internal Audit and regulatory examinations; manage planning, walkthroughs, evidence collection and quality review, and timely responses.
• Manage and maintain technology risk and security governance documentation, including policies, standards, procedures, control narratives, evidence requirements, and audit-ready artifacts.
• Identify, report, and remediate vulnerabilities across networks, servers, and endpoints.
• Manage security information and event management solutions for compliance and incident response.
• Lead security technology initiatives and continuous improvement across identity, detection, monitoring, data protection, security automation, and defensive security platforms.
• Partner with the Information Security Officer to support technical security education and awareness initiatives for technology staff and employees.

Benefits

• Medical, dental, and vision healthcare
• Basic term and optional term life insurance
• Short-term and long-term disability
• Parental leave
• 401(k) with employer match
• Paid vacation
• Paid holidays
• Hybrid work model
• Discretionary annual incentive program based on organizational and individual performance

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed