Director of Information Security

DBM GLOBAL INC • Phoenix, AZ

2d • Onsite

About The Position

As the Director of Information Security at DBMG, you are responsible for leading and advancing the organization’s cybersecurity program to protect information assets, technology, systems, infrastructure, and business operations. This role provides strategic and operational leadership across cybersecurity risk management, security operations, architecture, vulnerability management, incident response, identity and access security, data protection, third-party cybersecurity risk, and security awareness.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Certified Information Systems Security Professional (CISSP) certification required within 12 months of hire.
• 8+ years of progressive experience in cybersecurity, information security, security engineering, or security operations.
• 3+ years of cybersecurity leadership experience.
• Strong knowledge of cybersecurity risk management, security architecture, threat detection, vulnerability management, incident response, identity and access management, cloud security, endpoint security, and data protection.
• Demonstrated ability to communicate cybersecurity risk and business impact to executive and non-technical stakeholders.
• Strong leadership, collaboration, analytical, and decision-making skills.

Nice To Haves

• Experience working in complex, distributed, multi-business-unit environments.
• Experience securing Microsoft Azure, Microsoft 365, hybrid infrastructure, and enterprise applications.
• Additional relevant cybersecurity certifications such as CISM, CCSP, GIAC, or cloud security certifications.

Responsibilities

• Develop and execute the enterprise cybersecurity strategy, roadmap, policies, standards, and security priorities aligned with business objectives and enterprise risk.
• Identify, assess, prioritize, and communicate cybersecurity risks across infrastructure, applications, cloud environments, identities, data, and third parties.
• Oversee security operations, including threat monitoring, detection, vulnerability management, incident response, and continuous improvement of security capabilities.
• Establish and maintain enterprise security architecture and ensure secure-by-design principles are incorporated into infrastructure, cloud, applications, DevSecOps, and technology initiatives.
• Lead cybersecurity incident response and preparedness, including incident playbooks, tabletop exercises, containment, recovery, and post-incident improvement.
• Provide leadership for identity and access security, privileged access, endpoint protection, network and cloud security, and data protection capabilities.
• Develop and maintain cybersecurity awareness and training programs that strengthen employee security behaviors and organizational readiness.
• Establish cybersecurity metrics and reporting that provide the CIO and executive leadership with visibility into security posture, material risks, incidents, vulnerabilities, and risk-reduction initiatives.
• Partner with Infrastructure, DevSecOps, applications, and other technology teams to ensure cybersecurity controls are implemented, operated effectively, and remediated when deficiencies are identified.

What This Job Offers

• Job Type: Full-time
• Career Level: Director