Senior Director Cyber Security

Bread Financial•Columbus, OH

7d•Hybrid

About The Position

The Senior Director, Cyber Security leads the Cyber Security team and advances the organization’s security strategy and program. The role requires understanding the business model and organizational priorities while guiding technical and business leaders to meet regulatory requirements, protect company information assets, and mature the cyber security program. It oversees vulnerability management and penetration testing to identify and address security weaknesses and integrates those efforts into the broader security strategy. The Senior Director leads and develops managers and their teams, drives recruitment and performance processes, promotes innovation and cross-departmental collaboration, and communicates security goals to senior leaders and stakeholders. The role also leads security projects, improves processes and documentation, manages departmental budgets, oversees security KPIs and metrics, advises executives, and directs compliance and risk management activities. The position works in a normal office environment. Senior leaders must work at a Bread Financial office at least six days per month, or travel six days a month if not located near an office. Travel may be up to 10% quarterly. The listed base salary range is $214,200–$342,700, with higher location-specific ranges in certain states. The actual base pay may depend on work location, education, experience, and skills.

Requirements

Bachelor’s degree in Computer Science or Information Technology, or equivalent relevant work experience.
One or more field-related professional technical certifications, such as CISSP, CISA, CISM, or CRISC.
One cloud certification, such as AWS Cloud Practitioner, Microsoft Azure Fundamentals, or Google Cloud Cloud Digital Leader.
15–17 years of experience in Information Security, IT Audit, Cloud Security, or Risk Management.
At least 9 years of leadership experience.
Advanced negotiation and communication skills.
Ability to work at a Bread Financial office at least six days per month, or travel six days a month if not located near an office.
Ability to travel up to 10% quarterly.
Authorization to work in the United States full-time without current or future sponsorship.

Nice To Haves

Master’s degree in Computer Science or Information Technology, or equivalent relevant work experience.
Two or more field-related professional technical certifications, such as CISSP, CISA, CISM, or CRISC.
17–19 years of experience in Information Security, Cloud Security, Technical Controls, or Risk Management.
At least 12 years of leadership experience.
Skills in Cloud Architectures, Data Loss Prevention (DLP), Information Security, Vulnerability Management, Information Technology Auditing, Information Technology Operations, Intrusion Detection Systems (IDS), Network Access Control (NAC), NIST 800-53, NIST Cybersecurity Framework (CSF), and PCI DSS.

Responsibilities

Provide strategic direction and oversight for the Cyber Security team’s strategy and vision.
Lead and mentor Cyber Security managers and their direct reports, aligning their work with organizational goals.
Drive recruitment, development, and performance evaluation processes.
Champion innovation by staying current with emerging technical developments; facilitate cross-departmental collaboration and lead organizational change.
Design and oversee vulnerability management and penetration testing frameworks to identify, evaluate, and mitigate security weaknesses across company assets.
Communicate security goals and initiatives to senior leaders and stakeholders, including delivering presentations tailored to different audiences.
Lead IT projects aligned with the organization’s long-term security strategy; identify process gaps and develop effective processes.
Maintain and refine team processes and procedures; oversee run books and technical requirements documentation; manage departmental budgets and cost efficiency.
Engage with the Change Advisory Board to assess and manage changes affecting Cyber Security controls.
Develop and refine KPIs, analyze data, and produce actionable metrics to support continuous improvement.
Collaborate with senior executives on strategic and tactical security plans; advise stakeholders, resolve conflicts, explain complex security concepts, and offer options that support business objectives.
Oversee compliance with regulatory requirements, industry standards, and internal policies.
Develop and implement risk management frameworks to identify, assess, and mitigate security risks.
Lead audits and assessments to demonstrate compliance and ensure the security posture aligns with legal and regulatory obligations.

Benefits

Medical insurance
Prescription drug coverage
Dental insurance
Vision insurance
Basic and optional life insurance
Supplemental medical plans
Short- and long-term disability insurance
Six weeks of 100% paid parental leave for eligible parents, after a 180-day waiting period
401(k) plan with immediate enrollment eligibility
11 paid holidays
Flexible Time Off (FTO) program
Paid Sick and Safe Time (PSST); Illinois associates also receive Illinois Paid Leave
Ability to purchase company stock during offering periods
Annual incentive bonus based on individual and company performance
Career development opportunities