Director, Information Security Operations

MRO Corporation•,

1d•$162,000 - $219,000

About The Position

As the Director of Information Security, you will lead the execution and operational performance of MRO’s information security program. This role is accountable for building a high-performing security team, defining and tracking meaningful KPIs, and using measurable outcomes to improve security operations, vulnerability management, incident response, control effectiveness, and business alignment. You will oversee the development, implementation, and management of information security programs that protect the confidentiality, integrity, and availability of MRO’s data and systems. This role requires a strategic, metrics-driven leader with deep cybersecurity expertise, strong operational discipline, and the ability to drive accountability across teams. If you are passionate about building effective teams, improving performance through data, and continuously strengthening cybersecurity practices, we encourage you to apply.

Requirements

Experience leading and maturing an information security program with measurable outcomes, clear operating rhythms, and defined performance expectations.
Proven ability to define, implement, and manage cybersecurity KPIs, KRIs, dashboards, scorecards, SLAs, and operational performance reporting.
Demonstrated experience building, coaching, and leading high-performing teams with strong execution discipline, accountability, and measurable goals.
Advanced understanding of the competencies of the 8 Domains of the CISSP.
Track record of completing projects related to assessments, risk reduction, control improvement, vulnerability remediation, and security mitigation.
Ability to communicate security performance and risk to varied audiences, including end users, technical teams, business leaders, and executives.
Strong critical thinking, problem-solving, prioritization, and decision-making skills.
Proven planning, organizing, communication, and follow-through skills with the ability to translate metrics into action and sustained performance improvement.
Bachelor's degree in Information Security, Computer Science, Information Technology, or related field.
10+ years of cybersecurity experience, including 5+ years in a leadership role.
Experience leading enterprise cybersecurity programs within a Microsoft-centric environment.
Strong expertise with building meaningful dashboards and KPI’s to measure operational success.
Experience with security operations, incident response, vulnerability management, cloud security, and identity management.
Knowledge of cybersecurity frameworks including but not limited to NIST, CIS Controls, and SOCII/HITRUST
Proven ability to communicate technical concepts and risks to executive and business leaders.

Nice To Haves

Professional certifications such as CISSP, CISM, CRISC, CCSP
Experience with AI platforms and services
Experience in highly regulated organizations.

Responsibilities

Direct and oversee all aspects of security operations, including monitoring, incident response, threat intelligence, vulnerability management, and operational readiness.
Define, maintain, and continuously improve security KPIs, KRIs, dashboards, and scorecards that measure team performance, SLA adherence, remediation progress, incident response effectiveness, backlog health, control effectiveness, and security risk reduction.
Set clear expectations, establish measurable goals, coach team members, improve execution consistency, and create a culture of ownership, urgency, accountability, and continuous improvement.
Lead recurring operational reviews that evaluate performance against targets, identify blockers, assign ownership, track commitments, and ensure follow-through on prioritized work.
Implement and manage security monitoring tools and technologies to detect, measure, and respond to security threats in real time.
Stay abreast of emerging threats and vulnerabilities. Use threat intelligence to enhance defensive strategies, improve detection capability, and strengthen incident response readiness.
Manage the vulnerability assessment and remediation process. Ensure timely identification, prioritization, ownership assignment, SLA tracking, and mitigation of security vulnerabilities.
Conduct thorough investigations of security incidents, determine root causes, define corrective actions, and track completion of improvements to prevent recurrence.
Collaborate effectively with IT, compliance, legal, engineering, product, and executive leadership to align security initiatives with business objectives and communicate progress through clear, outcome-focused reporting.
Lead infrastructure and cybersecurity initiatives, including network security, server and storage security, endpoint security, cloud security, and related operational controls.
Identify opportunities for automation, process improvement, workflow optimization, and measurable risk reduction across the information security program.