IT Director - Cyber Security and Business Continuity

SkyWater Technology Foundry•Bloomington, MN

49d

About The Position

This position will report into SVP, IT and SCM. Position is responsible for overall leadership and direct supervision of cyber security and business continuity charter and associated programs. Responsibilities include developing, implementing, and managing the organization's enterprise-wide cybersecurity and business continuity strategy. This role provides leadership and vision to protect information assets, technologies, and services from internal and external threats. The Director will lead a team of cybersecurity professionals, oversee security operations, ensure compliance with regulatory requirements, and work closely with IT, business groups, internal teams, legal, compliance, and executive leadership. This role is also responsible to team management, setting group's policies and procedures as they relate to cyber security and business continuity. They are responsible for designing and delivering strategies, including but not limited to infrastructure, incident response, applications development and delivery, enterprise and factory applications, data and network, cyber security and CMMC maturity and compliance. This role is also responsible for building a comprehensive business continuity strategy and programs to avoid and minimize impact of mission-critical functions during and after a disruption.

Requirements

US Citizenship Required: This position will require the holding of or ability to obtain a government security clearance which requires U.S Citizenship
Bachelor's Degree in Computer Science, Information Technology or related field; Masters preferred.
10+ years demonstrated IT or Manufacturing IT department leadership experience.
Experience managing business continuity or disaster recovery programs is required.
Experience with government programs requiring specific cybersecurity protocols and security clearances.
Strong knowledge of cybersecurity and business continuity frameworks (e.g., NIST, ISO 27001, ISO 22301, SOX, CMMC).
Proven ability to lead cross-functional teams during crisis situations.
Experience with risk assessment, Business Impact analysis, recovery strategy development, and Business continuity and Cyber security planning.
Strong analytical, strategic thinking, and decision-making abilities.
Effective communicator with the ability to engage both technical and non-technical audiences.
Demonstrated success working collaboratively with clients, internal teams, and external partners to urgently solve problems and deliver value
Excellent organizational and follow-up skills
Proven ability to influence and inspire internal and external teams, peers and executives.
Ability to be a strong team player and coach.
Experience leading complex, major change initiatives; demonstrated skills in change management. Ability to act as a change agent for the company and IT org.
A team player who favors collaborative approaches when working with internal and external partners.

Nice To Haves

Certifications such as CISSP, CISM, CISA, CEH, CBCP (Certified Business Continuity Professional) or equivalent are preferred.

Responsibilities

Cybersecurity Leadership:
Develop and execute a comprehensive cybersecurity strategy aligned with organizational goals and risk tolerance.
Lead and manage the cybersecurity team, including hiring, mentoring, and performance management.
Oversee the Security Operations Center, incident response plans, threat intelligence, and vulnerability management.
Evaluate and implement new security technologies, tools, and frameworks.
Ensure compliance with relevant cybersecurity regulations and frameworks (e.g., NIST, ISO 27001, GDPR, SOX, CMMC).
Establish and enforce security policies, standards, and procedures across the organization.
Act as the lead for cyber incident response, managing investigations, communications, and recovery efforts.
Provide regular reports and briefings to executive leadership and the board on cyber risk and security posture.
Business Continuity & Disaster Recovery:
Develop, implement, and maintain the organization's business continuity and disaster recovery plans.
Conduct business impact analyses and risk assessments to identify critical business functions and interdependencies.
Collaborate with stakeholders to design recovery strategies for systems, applications, and business processes.
Lead periodic testing and simulation exercises to ensure preparedness and plan effectiveness.
Coordinate response and recovery efforts during business disruptions (e.g., cyber attacks, natural disasters, system outages).
Ensure alignment between cybersecurity, IT disaster recovery, and enterprise continuity strategies.
Maintain compliance with relevant business continuity and disaster recovery regulations and industry standards.
Cross-Functional Collaboration:
Partner with IT, legal, compliance, HR, and business unit leaders to integrate cybersecurity and continuity planning across the enterprise.
Develop and promote security and continuity awareness programs.
Advise leadership on emerging threats, risks, and regulatory changes.
Work collaboratively with other members of the Executive Committee to help SkyWater Technology Foundry set and meet corporate goals including the design of the strategy SkyWater will use to rapidly grow the company.
Drive a culture of continuous improvement to improve execution and remove roadblocks for teams.
Translate business problems to technology solutions.
Influence and team up to setup IT organization's vision and strategy to promote a culture and mindset in line with SkyWater core values.
Incorporate new and innovative use of technology and services to support the business strategy and roadmap.
Develop and drive metrics for success in Cyber security and business continuity objectives and goals.
Collaborate with third parties to develop strategic vendor partnerships for areas of responsibility.
Maintain relationships with strategic vendors inclusive of negotiating initial contracts to maximize service and minimize cost.
Review contracts on a regular basis and renegotiate terms as needed to align with current requirements.