Director, IT Security

Wolters Kluwer•Tampa, FL

1d•$181,900 - $325,050

About The Position

The Director, Security Strategy & Transformation is a senior leadership role responsible for defining, operationalizing, and governing enterprise security strategy in alignment with business objectives, regulatory requirements, and evolving technology landscapes. Reporting directly to the Chief Information Security Officer (CISO), this leader works with technology executives, business leaders, and key stakeholders to turn security vision into measurable outcomes, scalable operating models, and sustainable risk reduction. The role combines security strategy, enterprise transformation, program leadership, operating model design, and executive advisory work. It leads strategic initiatives to strengthen the organization's security posture while enabling innovation, business growth, and operational agility. Responsibilities span security planning, portfolio governance, executive and board communications, risk and regulatory enablement, emerging technology adoption, and organizational change.

Requirements

Bachelor’s degree in computer science, Information Technology, Cybersecurity, Risk Management, Business Administration, or a related field.
10 or more years of experience in security strategy, enterprise transformation, technology risk, program leadership, management consulting, or related disciplines, with progressively increasing responsibility.
Experience partnering with CISO, CIO, CTO, or equivalent executive leaders within large, complex organizations.
Success designing, scaling, and governing enterprise security programs, including IAM, cloud security, vulnerability management, insider risk, privacy, and resilience initiatives.
Strong experience in operating model design, portfolio governance, strategic planning, and KPI-driven performance management.
Experience developing executive- and board-level communications on security, risk, transformation, and investment outcomes.
Deep knowledge of cybersecurity, risk, compliance, and governance frameworks, including NIST CSF, NIST 800-53, ISO 27001, COBIT, SOX, HIPAA, and PCI DSS.
Success leading organizational change, technology transformation, and cross-functional strategic initiatives.
Experience designing and implementing automated workflows, integrations, reporting solutions, and operational dashboards.
Exceptional communication, stakeholder management, and executive presentation skills.
Strong analytical, strategic thinking, and problem-solving capabilities, including balancing risk, operational efficiency, and business objectives.
Familiarity with regulatory and compliance requirements across the United States, European Union, and APAC.
Knowledge of IT operational processes, including change management, incident management, and service management practices.
Ability to translate complex technical, regulatory, and risk requirements into clear business outcomes and recommendations.

Nice To Haves

Master’s degree in Cybersecurity, Information Systems, Business Administration (MBA), or a related field.
Industry certifications such as CISSP, CISM, CRISC, CGEIT, PMP, or equivalent.
Experience within highly regulated industries, including healthcare, financial services, software, or technology organizations.
Experience supporting enterprise AI governance, responsible AI initiatives, and security strategy for emerging technologies.

Responsibilities

Partner with the CISO and senior technology leaders to define, evolve, and execute the enterprise security strategy, multi-year roadmap, and investment priorities.
Establish and monitor security OKRs, KPIs, and maturity models aligned with risk reduction, regulatory readiness, and business enablement.
Assess emerging cybersecurity, privacy, insider risk, AI, and regulatory risks and trends, and translate them into strategies and investment decisions.
Develop strategic frameworks supporting long-term security, resilience, and business growth.
Design and lead the enterprise security operating model, including strategic planning, portfolio governance, prioritization, and execution oversight across cybersecurity, privacy, and technology risk.
Establish and mature portfolio management and PMO capabilities for initiatives including IAM, vulnerability management, cloud security, insider risk, and operational resilience.
Lead enterprise-wide security transformation programs from strategy through implementation and adoption.
Drive accountability through governance structures, performance metrics, and executive reporting.
Develop executive- and board-level communications on security posture, risk exposure, program performance, investment value, and organizational maturity.
Prepare and deliver strategic cybersecurity updates for executive leadership, board committees, and other governance forums.
Translate complex technical and risk concepts into clear business narratives to support informed decisions.
Advise senior leadership on security strategy, transformation initiatives, and emerging risks.
Translate regulatory, compliance, and privacy requirements into measurable roadmaps and strategic initiatives that balance innovation with risk management.
Partner with Legal, Compliance, Audit, and Enterprise Risk Management teams to integrate security strategy into broader risk governance frameworks.
Establish reporting and analytics capabilities that provide visibility into risk, compliance, assurance, and incident response performance.
Support regulatory readiness and audit activities across multiple jurisdictions and industries.
Guide strategic adoption of cloud, AI/ML, automation, and observability technologies to modernize security operations and enterprise technology platforms.
Evaluate and govern emerging technologies, including AI agents, generative AI, and semantic search solutions, with security and privacy by design.
Champion scalable, user-centric security solutions that improve protection while minimizing operational friction.
Partner with technology and product teams to embed security in innovation initiatives and digital transformation efforts.
Align engineering, operations, product, risk, and business teams around shared objectives in highly matrixed environments.
Drive organizational change through communication, stakeholder engagement, and structured change management practices.
Build communities of practice and centers of excellence to strengthen security capabilities, governance, and execution.
Mentor and develop leaders while promoting accountability, collaboration, and continuous improvement.