Director, Security

Xtium

2d•Remote

About The Position

The XTIUM global team is made up of a group of diverse and talented professionals who are all driven by the same goal: excellence and continuous improvement. We are all about embracing challenges, keeping the lines of communication open and working together. We take ownership of our work, focus on learning and growing and hold ourselves accountable to our colleagues and customers. Together, we strive to push boundaries, make an impact and inspire each other to reach our full potential. At XTIUM, we don’t just build IT solutions—we build careers. Our culture is designed to empower individuals to achieve their best while making a real impact. You’ll have the opportunity to connect with our leadership team, embrace challenges, and celebrate success in a dynamic, fast-paced environment. If you’re passionate, driven, and eager to grow, XTIUM is where your potential meets opportunity. Our team members are the driving force behind our success, and we’re looking for passionate, resilient individuals eager to grow and make a meaningful impact. If you’re ready to contribute and help shape the future, XTIUM is the place for you. About the Role: The Director of Security is the day-to-day leader of XTIUM's security program under the CIO. This role translates executive security strategy into operating rhythms, control improvements, compliance outcomes, and cross-functional execution. The Director owns the cyber risk register process, directs internal and external security partners, and ensures security work supports both business resiliency and customer commitments. Success in this role means faster remediation, stronger governance, and clear accountability across the organization.

Requirements

8+ years of progressive information security experience, including leadership across security operations, GRC, architecture, or program management.
Experience building or scaling security programs in an MSP, MSSP, managed services, or other technology services environment.
Strong working knowledge of NIST CSF, risk management practices, compliance frameworks, and customer assurance requirements.
Experience owning third-party security partner relationships, including MSSP, MDR, SOC, TVM, or penetration testing providers.
Ability to communicate risk, priorities, and trade-offs clearly to executives, technical leaders, auditors, and customers.
Familiarity with cloud and SaaS security concepts, identity controls, logging, incident response, and vulnerability management workflows.
Bachelor's degree or equivalent experience required

Nice To Haves

CISSP, CISM, CRISC, or similar certification preferred.

Responsibilities

Lead the execution of XTIUM's enterprise security program, including governance, policy, standards, and control improvement plans.
Own the day-to-day operation of the cyber risk register, including risk intake, scoring, action planning, escalation, and executive reporting.
Direct the Security Manager and coordinate outcomes across ESD, Ascent, and other internal or external stakeholders.
Partner with the CIO, CTO, Delivery, and Product leaders to align security priorities with architecture, operations, and roadmap decisions.
Drive compliance and assurance activities, including customer questionnaires, audit support, evidence collection, and control narratives.
Establish security metrics and operating reviews that track detection, remediation, incidents, exceptions, and control maturity.
Support incident response leadership by guiding decision-making, communications, root-cause follow-up, and corrective actions.