Director of Enterprise Security

Graebel Companies, Inc.

9d•$140,000 - $195,000•Remote

About The Position

This role can be based remotely in the United States. Are you ready to open a world of opportunity in talent mobility? Our clients include some of the largest and most recognized brands in the world. They’re innovators and leaders in their industries, making life-enhancing breakthroughs every day. We help them tap into those opportunities by placing their exceptional people where they need to be, anywhere in the world. When it comes to service, we set the bar for exceptional … and then we raise it with fresh ideas, leading tools and innovative approaches, and it’s all grounded in our values of truth, love, and integrity. We call it People-first Mobility. We’re looking for exceptional people who share those values along with our passion for delivering the highest levels of service. If that sounds like you, and if you’re ready for a new career opportunity, we’d like to hear from you! Here’s to the world ahead. The Director of Enterprise Security leads the organization’s information security function and owns two core areas of responsibility. The first is directing the operations of the organization’s security solutions through direct leadership of the Information Security team, including hiring, development, and performance management of security analysts and staff. The second is driving the enterprise security strategy through policy, architecture, and training programs, and translating that strategy into enterprise-wide priorities, standards, and budget. The Director helps own the selection and evaluation of security solutions, oversight of vulnerability audits and assessments, and management of security vendor relationships and spend. The Director of Enterprise Security partners with leaders across the organization, representing Information Security in cross-functional decision-making, shaping the corporate security vision, and building organization-wide engagement in achieving higher levels of enterprise security.

Requirements

Direct leadership of the Information Security team, including hiring, development, and performance management of security analysts and staff.
Driving the enterprise security strategy through policy, architecture, and training programs.
Translating strategy into enterprise-wide priorities, standards, and budget.
Selection and evaluation of security solutions.
Oversight of vulnerability audits and assessments.
Management of security vendor relationships and spend.
Partnering with leaders across the organization, representing Information Security in cross-functional decision-making.
Shaping the corporate security vision.
Building organization-wide engagement in achieving higher levels of enterprise security.
Experience with security architecture design.
Experience with security awareness training programs.
Experience with security documents (policies, standards, baselines, guidelines, and procedures).
Experience with Third Party Risk Programs.
Experience with Disaster Recovery Plans.
Coaching, performance management, and succession planning for security analysts and staff.
Development of multi-year cybersecurity strategy and maturity roadmap.
Maintaining up-to-date knowledge of the Information Security industry.
Building business cases for security investments.
Acquiring security solutions or enhancements.
Overseeing deployment, integration, and initial configuration of security solutions.
Ensuring confidentiality, integrity, and availability of data.
Enforcing enterprise security policies.
Reporting on security and risk posture to senior leadership and executive team.
Driving AI governance and security programs.
Directing investigations into problematic activity.
Communicating with management regarding investigations.
Designing and executing vulnerability assessments, penetration tests, and security audits.
Serving as executive sponsor for security awareness training programs.
Contract negotiation and strategic vendor management.
Representing the enterprise with business unit leaders.

Responsibilities

Lead execution of the organization’s security strategy, including the security architecture design, security awareness training program, security documents (policies, standards, baselines, guidelines, and procedures), Third Party Risk Program and Disaster Recovery Plan, where appropriate.
Lead the Information Security team, including hiring, coaching, performance management, and succession planning for security analysts and staff.
Along with CISO, support development of a multi-year cybersecurity strategy and maturity roadmap aligned with business growth objectives, technology modernization initiatives, and emerging threats.
Maintain up-to-date knowledge of the Information Security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
Help build the business case for security investments; select and acquire additional security solutions or enhancements to existing security solutions to improve overall enterprise security as per the enterprise’s existing procurement processes. Oversee the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.
Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise workstations, servers and other systems and in databases and other data repositories. Ensure the enforcement of enterprise security policies and report on the organization’s security and risk posture to senior leadership and, as appropriate, the executive team.
Help drive the organization’s AI governance and security program, including policies and controls for the secure and responsible use of AI tools and models, oversight of AI-related risk (e.g., data leakage, model abuse, third-party AI vendor risk), and partnership with legal, privacy, and business stakeholders on responsible AI adoption.
Direct all investigations into problematic activity and own on-going communication with management, and direct the design and execution of vulnerability assessments, penetration tests and security audits.
Serve as the executive sponsor for the security awareness training program to ensure consistently high levels of compliance with enterprise security policies and drive ongoing communications with various business groups to ensure enterprise-wide understanding of security goals, to solicit feedback and to foster co-operation.
Own 3rd party relationships (MSSPs, etc.), including contract negotiation and strategic vendor management.
Represent enterprise with business unit leaders, shaping the corporate security vision and securing their engagement in achieving enterprise security goals and corporate risk mitigation plans.
Perform any other related duties as required or assigned.