Director, Cybersecurity

Hut 8•Miami, FL

1d•Onsite

About The Position

The Partner, Cyber Security is the leader accountable for defining and building Hut 8's entire security program from the ground up. Operating at the domain owner, this person owns security strategy, architecture, and governance across corporate IT, mining operations, data-center infrastructure, cloud, and AI/compute environments. They set the security vision, establish the control framework, manage the cyber security vendor (i.e. Kernel Advisory) relationship, and in-house Security Operations capability. This is a hands-on builder-leader role, reporting into the Technology organization.

Requirements

7+ years of progressive cybersecurity/information security experience, including 3+ years in a security leadership or director role; experience at a publicly traded company (SOX environment) strongly preferred.
Bachelor's degree in Computer Science, Information Security, or a related field; Master's or security certifications (CISSP, CISM, CCSP, GIAC) strongly preferred.
Strong knowledge of security architecture, cloud and SaaS security, identity & access management, network security, and endpoint/OT security; deep familiarity with SaaS-first corporate environments.
Hands-on experience owning security compliance frameworks and audits — SOC 2, NIST CSF / ISO 27001, SOX ITGC, and PCI — including third-party audit and assessment leadership.
Proven delivery of enterprise security programs — SIEM/SOC, EDR, vulnerability management, incident response, and identity & access management.
Experience securing platform integrations, APIs, CI/CD pipelines, and cloud/data architecture, plus disciplined testing and control-validation practices.
Demonstrated security budgeting and vendor/MSSP negotiation and management experience, including transitioning capabilities in-house.
Excellent leadership, communication, and stakeholder skills across technical and non-technical audiences, up to board level.

Responsibilities

Define and own Hut 8's end-to-end cybersecurity strategy, roadmap, and security architecture spanning corporate IT, mining operations, data centers, cloud, and AI/compute environments.
Establish the enterprise security control framework and governance, risk & compliance (GRC) program, aligning to recognized standards (e.g., NIST CSF, ISO 27001, SOC 2) and relevant regulatory obligations.
Design defense-in-depth architecture across network segmentation, identity & access management (IAM), endpoint, cloud, and OT/industrial control systems, embedding "security by default" into all new systems.
Build and lead the Security Operations capability — threat detection, monitoring, incident response, and vulnerability management.
Own identity and access governance, including privileged access, MFA, SSO, least-privilege policy, and access reviews across the enterprise.
Lead incident response and breach management end to end: preparation, detection, containment, eradication, recovery, and post-incident review, including executive and regulatory communication.
Manage the security vendor ecosystem and budget, defining tooling strategy, evaluating and selecting platforms, and setting clear exit criteria for reducing external dependency.
Establish the security awareness and anti-phishing program, driving a security-conscious culture across a rapidly scaling, multi-site workforce.
Partner with Software, Networking, Data Engineering, Business Intelligence and Applied AI leaders to secure the technology lifecycle, production platforms, and enterprise data without slowing delivery.
Recruit, mentor, and grow the internal security team, building the cyber security internal capacity.