Partner, Cybersecurity

Hut 8•Miami, FL

2d•Onsite

About The Position

The Cybersecurity Partner is Hut 8’s senior security leader and enterprise owner for cybersecurity strategy, architecture, governance, and risk. The role defines the security vision and operating model across corporate IT, mining operations, data centers, cloud, and AI/compute environments, and turns that vision into a practical roadmap for a rapidly scaling, publicly traded company. This builder-leader role establishes the security program, sets its control framework, leads material incident and risk decisions, manages the external security ecosystem, and develops internal capability to progressively bring security operations and ownership in-house. It reports into the Technology organization and works closely with Software, Networking, Data Engineering, Business Intelligence, Applied AI, Finance, Legal, People, and Mining Operations. The position is in the office at Hut 8’s corporate headquarters in the Brickell area of Miami, Florida. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Requirements

At least 8 years of progressive cybersecurity or information security experience, including significant experience as a security leader, head of security, CISO, or equivalent enterprise security owner.
Experience building or materially transforming a cybersecurity program in a complex, fast-growing, or publicly traded organization.
Bachelor’s degree in Computer Science, Information Security, or a related field.
Ability to set enterprise security strategy and translate it into a sequenced, funded, measurable roadmap.
Strong knowledge of security architecture, cloud and SaaS security, identity and access management, network security, endpoint security, data security, and OT or industrial control environments.
Hands-on experience owning security control frameworks, audits, and assessments, including SOC 2, NIST CSF, ISO 27001, SOX ITGC, PCI, and third-party risk.
Experience establishing or leading SIEM or SOC capabilities, EDR, vulnerability management, incident response, identity governance, and security engineering programs.
Experience securing platform integrations, APIs, CI/CD pipelines, cloud and data architectures, and AI or compute environments.
Experience managing security budgets, vendors, MSSPs, contracts, and executive-level trade-offs, including transitioning capabilities in-house.
Experience leading material incidents and communicating with executives, board members, regulators, legal counsel, and non-technical stakeholders.
Strong leadership, judgment, influence, and communication skills, including the ability to create alignment and make pragmatic decisions under ambiguity.
A builder’s mindset, including willingness to design the operating model, establish foundations, and personally engage in the work required to make the program effective.

Nice To Haves

SOX experience is strongly preferred.
A master’s degree is strongly preferred.
Certifications such as CISSP, CISM, CCSP, or GIAC are strongly preferred.

Responsibilities

Define and own the enterprise cybersecurity strategy, target operating model, multi-year roadmap, and security architecture.
Establish security priorities, decision rights, risk tolerances, investment requirements, and organizational success measures.
Advise executive leadership and the board on material risks, incidents, control maturity, and remediation progress.
Establish and govern the enterprise security control framework in line with recognized standards and applicable obligations.
Own cybersecurity governance, risk, and compliance, including risk acceptance, control ownership, evidence management, audit readiness, third-party assessments, and remediation tracking.
Set defense-in-depth architecture across identity and access management, network segmentation, endpoint security, cloud, SaaS, data, APIs, CI/CD pipelines, and OT or industrial control environments.
Define security-by-default principles and embed them in technology strategy, architecture review, procurement, solution design, and the system development lifecycle.
Build and lead Security Operations, including threat detection, monitoring, security engineering, vulnerability management, incident response, and security metrics.
Own identity and access governance, including privileged access, MFA, SSO, least privilege, joiner-mover-leaver controls, access reviews, and segregation of duties.
Lead cyber incident and breach management end to end, including preparation, detection, containment, eradication, recovery, post-incident review, executive communication, and regulatory coordination.
Manage the security vendor and MSSP ecosystem, including strategy, evaluation, contracts, performance, budget, service levels, and criteria for reducing external dependency.
Establish security awareness, training, and anti-phishing programs for a distributed, multi-site workforce.
Partner with technology and business leaders to protect enterprise data, production platforms, mining environments, and AI/compute workloads without unnecessarily slowing delivery.
Recruit, mentor, and grow the internal security team, creating clear ownership across architecture, engineering, operations, GRC, and incident response.
Define operating metrics and regularly assess the effectiveness, coverage, and maturity of the security program.