Senior Director Cyber Security

Bread Financial•Pennsbury Township, PA

6d•$214,200 - $428,400•Hybrid

About The Position

The Senior Director, Cyber Security leads the Cyber Security team and develops its strategy and vision in alignment with business priorities. The role guides technical and business leaders to meet regulatory requirements, protect company information assets, and mature the cyber security program. It oversees vulnerability management and penetration testing and integrates these activities into the broader security strategy to strengthen the organization’s defenses. The Senior Director leads and develops Cyber Security managers and their teams, drives recruitment and performance processes, promotes innovation and cross-departmental collaboration, and communicates security priorities to senior leaders and stakeholders. The role leads security-related IT projects, improves processes and documentation, manages departmental budgets, tracks performance using KPIs and data analysis, and advises executives on security plans and business-aligned options. The role also oversees compliance with regulatory requirements, industry standards, and internal policies; develops risk management frameworks; and leads audits and assessments. The work environment is a normal office environment. Senior leaders must work at a Bread Financial office at least six days per month, or be able to travel six days per month if not located near an office. Travel may be up to 10% quarterly.

Requirements

Bachelor’s degree in Computer Science or Information Technology, or equivalent relevant work experience.
One or more related professional technical certifications, such as CISSP, CISA, CISM, or CRISC.
One cloud certification: AWS Cloud Practitioner, Microsoft Azure Fundamentals, or Google Cloud Digital Leader.
15–17 years of experience in Information Security, IT Audit, Cloud Security, or Risk Management.
At least 9 years of leadership experience.
Skills in cloud architectures, Data Loss Prevention (DLP), information security, vulnerability management, IT auditing and operations, Intrusion Detection Systems (IDS), Network Access Control (NAC), NIST 800-53, NIST Cybersecurity Framework (CSF), and PCI DSS compliance.
Advanced negotiation and communication skills and ability to navigate ambiguity and deliver results in complex environments.
Ability to perform the essential job functions and meet the stated physical, mental, and work-environment requirements, with reasonable accommodations as applicable.
Work authorization in the United States on a full-time basis without current or future sponsorship.

Nice To Haves

Master’s degree in Computer Science or Information Technology, or equivalent relevant work experience.
Two or more related professional technical certifications, such as CISSP, CISA, CISM, or CRISC.
17–19 years of experience in Information Security, Cloud Security, Technical Controls, or Risk Management.
At least 12 years of leadership experience.

Responsibilities

Provide strategic direction and oversight for the Cyber Security team’s strategy and vision.
Lead and mentor Cyber Security managers and their direct reports; drive recruitment, development, and performance evaluation.
Promote innovation, facilitate cross-departmental collaboration, and lead enterprise change aligned with organizational priorities.
Design and oversee vulnerability management and penetration testing frameworks to identify, evaluate, and mitigate weaknesses across company assets.
Communicate security goals and initiatives to senior leaders and stakeholders, and deliver presentations tailored to diverse audiences.
Lead IT projects aligned with the organization’s long-term security strategy; identify gaps and develop effective processes.
Maintain and refine team processes and procedures, oversee critical documentation such as run books and technical requirements, and manage departmental budgets and cost-efficiency.
Engage with the Change Advisory Board to assess and manage changes affecting Cyber Security controls.
Develop and refine KPIs, analyze data, and produce actionable metrics to support continuous improvement.
Collaborate with senior executives on strategic and tactical security plans; advise on asset protection, standards, conflict resolution, and business-aligned security options.
Oversee compliance with regulatory requirements, industry standards, and internal policies; develop risk management frameworks and lead audits and assessments.

Benefits

Medical insurance
Prescription drug coverage
Dental insurance
Vision insurance
Basic and optional life insurance
Supplemental medical plans
Short- and long-term disability insurance
Six weeks of 100% paid parental leave for eligible parents after a 180-day waiting period
401(k) plan
11 paid holidays
Flexible Time Off (FTO) program
Paid Sick and Safe Time (PSST)
Illinois Paid Leave for associates located in Illinois
Opportunity to purchase company stock during offering periods
Annual incentive bonus based on individual and company performance
Career development opportunities
Wellness benefits