Director Cybersecurity

Bridgewater Bank • Saint Louis Park, MN

21h • $144,500 - $190,000 • Hybrid

About The Position

Bridgewater Bank is seeking a hands-on Director of Cybersecurity to lead the design, implementation, operation, and continuous improvement of its cybersecurity architecture, engineering, and technology controls. The role combines strategic leadership with direct technical involvement across Azure, Microsoft 365, hybrid infrastructure, identity, SaaS platforms, applications, APIs, integrations, automation, and defensive security technologies. The Director develops and executes cybersecurity capabilities aligned to the NIST Cybersecurity Framework, including security architecture, identity and access management, security operations, threat and vulnerability management, incident response, and cyber resilience.

The Director partners with the Information Security Officer, Internal Audit, Compliance/ERM, and technology and business leaders to align cybersecurity operations with governance, risk management, and regulatory expectations. The role leads technology control assurance, supports audits and regulatory examinations, coordinates control testing across IT teams, and drives remediation and closure of identified issues.

Bridgewater Bank describes itself as an entrepreneurial Twin Cities bank with a fast-moving, lean, evolving culture and opportunities for personal and professional growth. The position offers a hybrid work model. The typical annual base pay range is $144,500–$190,000, with eligibility for a discretionary annual incentive program based on organizational and individual performance. The role is exempt.

Requirements

• At least 8 years of progressive experience in cybersecurity, cloud or infrastructure engineering, enterprise architecture, security architecture, or related technology disciplines, including experience in a highly regulated environment.
• At least 3 years of technical leadership, architecture ownership, or team leadership experience, including mentoring engineers while remaining hands-on with complex technical work.
• Deep experience designing, implementing, and operating cybersecurity controls across Microsoft Azure, Microsoft 365, identity and access management, data protection, and cloud security platforms, including Microsoft Defender, Purview, Entra ID, and Conditional Access.
• Experience securing hybrid infrastructure, cloud platforms, SaaS applications, networks, endpoints, web applications, and APIs through architecture, monitoring, vulnerability management, and control implementation.
• Strong understanding of security operations, threat intelligence, incident response, vulnerability management, penetration testing, security monitoring, SIEM/SOAR, and root-cause analysis.
• Ability to develop technology standards, reference architectures, roadmaps, resilience strategies, configuration baselines, diagrams, and runbooks, and to evaluate vendors, solutions, and emerging technologies.
• Experience supporting technology controls programs in highly regulated environments, including NIST-based control frameworks, internal and external audits, regulatory examinations, issue remediation, and GRC tooling such as Optro.
• Strong understanding of resilient architecture, business continuity, disaster recovery, backup protection, recovery testing, and security considerations for high-availability services.
• Strong written and verbal communication skills, including the ability to explain complex technical issues in terms of risk, business impact, options, and recommendations to technical teams, executives, auditors, regulators, and Board-level audiences.

Nice To Haves

• Financial services experience is strongly preferred.
• Industry certification such as CISSP, CCSP, CISM, GIAC, Microsoft Cybersecurity Architect Expert, Azure Solutions Architect Expert, or equivalent is preferred.

Responsibilities

• Lead technical architecture, standards, strategic roadmap development, vendor evaluation, and technology investment recommendations across Azure, Microsoft 365, hybrid infrastructure, SaaS platforms, web technologies, APIs, integrations, automation, and application enablement.
• Own technical strategy and control design for Microsoft Entra ID/Azure AD, identity and access management, Conditional Access, phishing-resistant multifactor authentication, single sign-on, SAML/OIDC federation, SCIM/JIT provisioning, privileged access, service identities, and joiner-mover-leaver lifecycle controls.
• Lead technical cybersecurity incident response, including preparation, detection, containment, eradication, recovery, lessons learned, and coordination with the Information Security Officer and Bank’s Leadership Team.
• Collaborate with IT teams and the Information Security Officer to design and implement security strategies, controls, monitoring, vulnerability management, and reporting.
• Lead threat intelligence meetings and oversee the collection and analysis of security information to proactively mitigate risks.
• Define and operate a technology control testing program aligned to NIST CSF; coordinate testing across IT and control owners, and report results, themes, and remediation needs.
• Manage technology audit and examination workflows, including coordination through Optro, remediation planning, issue tracking, corrective-action validation, and closure reporting.
• Manage penetration-test reporting and governance, including provider scoping and deliverables, stakeholder communications, remediation tracking, and retesting and closure.
• Develop and deliver technology risk, controls, and audit-status reporting to stakeholders, including the Information Security Officer, CIO/CTO, ERM/Risk, Compliance, Internal Audit, and management or Board-level committees as applicable; escalate emerging risks and control gaps with recommendations.
• Lead technical cybersecurity assessments of third-party technology providers and partner with business and operational leaders to assess risk and implement security controls.
• Serve as a technical resource for access controls, data loss prevention, SIEM/SOAR, and cloud, network, and endpoint security.
• Own technology audit readiness and response, serving as the primary coordination point for Internal Audit and regulatory examinations; manage planning, walkthroughs, evidence collection and quality review, and timely responses.
• Manage and maintain technology risk and security governance documentation, including policies, standards, procedures, control narratives, evidence requirements, and audit-ready artifacts.
• Identify, report, and remediate vulnerabilities across networks, servers, and endpoints.
• Manage security information and event management solutions for compliance and incident response.
• Lead security technology initiatives and continuous improvement across identity, detection, monitoring, data protection, security automation, and defensive security platforms.
• Partner with the Information Security Officer on technical security education and awareness initiatives for technology staff and employees.

Benefits

• Medical, dental, and vision healthcare
• Basic term and optional term life insurance
• Short-term and long-term disability
• Parental leave
• 401(k) with employer match
• Paid vacation
• Paid holidays
• Discretionary annual incentive program driven by organization and individual performance
• Hybrid work model

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed