Senior Director, Cybersecurity Engineering

Banner Health • Phoenix, AZ

1d

About The Position

This leadership role shapes and executes Banner Health’s cybersecurity engineering strategy, focusing on Zero Trust architecture, network security, identity and access management, cloud security, and data protection. The Senior Director partners with executive leadership to advance transformational security initiatives, align cybersecurity investments with business objectives, and establish an enterprise security maturity roadmap.

The position leads the strategic development, implementation, and ongoing management of the organization’s cybersecurity engineering framework. It influences cybersecurity vision and strategy, tracks technology and market changes, and collaborates with senior security and IT leaders on strategy, special projects, and complex security challenges. The role also serves as an expert advisor to senior and executive leadership on security technology choices, total cost of ownership, return on investment, and strategic business value.

The role builds and leads security engineering and architecture teams in a fully remote environment. It may require off-site travel for annual team gatherings, conferences, or critical vendor meetings. Variable shifts, on-call hours, and responses to off-hour paging may be required; on-call availability for security incidents and escalations is required.

Requirements

• Master’s degree in Cybersecurity, Information Security, Information Systems, Computer Science, or a related field, or equivalent education and work experience.
• Ten years of current and progressive experience in information security and cybersecurity leadership, including five or more years in senior leadership roles managing enterprise security programs.
• Proven track record implementing protective technology in complex enterprise environments.
• Extensive hands-on experience with Zscaler or similar cloud security platforms.
• Deep expertise in network segmentation, microsegmentation, and software-defined perimeter technologies.
• Strong background with IAM platforms such as Okta, Azure AD, Ping Identity, SailPoint, or CyberArk.
• Experience with data security technologies such as DLP, CASB, encryption, and tokenization.
• Demonstrated success with configuration management and infrastructure as code tools.
• Proven ability to lead and manage distributed remote teams effectively.
• Expert knowledge of Zero Trust principles and frameworks, including NIST SP 800-207, Forrester, and Gartner.
• Advanced understanding of network protocols, architectures, and security controls.
• Proficiency with AWS, Azure, GCP, and cloud-native security.
• Strong knowledge of identity protocols, including SAML, OAuth, OIDC, Kerberos, and LDAP.
• Familiarity with SIEM, SOAR, EDR, and security analytics platforms.
• Understanding of DevSecOps practices and security automation.
• Proficient understanding of regulatory and compliance mandates, including HIPAA, HITECH, PCI, Sarbanes-Oxley, GDPR, and CCPA, and of compliance frameworks such as SOC 2, ISO 27001, NIST CSF, and CIS Controls.
• Technical project experience designing, developing, integrating, and implementing solutions to resolve complex technical and business issues.
• Availability for on-call security incidents and escalations; variable shifts, on-call hours, and off-hour paging may be required.
• Ability to travel off site for annual team gatherings, conferences, or critical vendor meetings as needed.

Nice To Haves

• CISSP (Certified Information Systems Security Professional).
• CISM (Certified Information Security Manager).
• CCSP (Certified Cloud Security Professional).
• CISA (Certified Information Systems Auditor).
• Vendor-specific certifications in Zscaler, cloud platforms, or IAM solutions.
• Additional related education and/or experience.

Responsibilities

• Develop and execute an enterprise Zero Trust strategy aligned with business objectives and risk tolerance, establish a maturity roadmap, define success metrics and KPIs, and provide executive leadership on architecture and investment decisions.
• Integrate Zero Trust principles into digital transformation initiatives and ensure security architectures align with business priorities, reference architecture standards, policies, and regulatory requirements.
• Design and implement micro-segmentation strategies; lead deployment and optimization of the Zscaler cloud security platform; architect ZTNA solutions; oversee network security policies, enforcement, monitoring, and secure connectivity for remote workers, partners, and third parties.
• Establish identity-centric security controls, including adaptive and multifactor authentication, risk-based access policies, privileged access management, just-in-time access, identity governance, access certification, and lifecycle management; integrate IAM with SIEM/SOAR platforms.
• Develop a data classification framework and implement data protection controls, including DLP, encryption, rights management, least-privilege access policies, and CASB technologies; ensure compliance with data privacy regulations.
• Establish security configuration baselines and hardening standards; embed security controls in infrastructure as code; lead vulnerability and patch management; deploy configuration monitoring and drift detection; ensure secure DevSecOps and CI/CD pipeline practices.
• Build, mentor, and lead high-performing security engineering and architecture teams in a fully remote environment; foster continuous learning and innovation, develop talent and succession plans, and collaborate with HR on security awareness and culture initiatives.
• Ensure Zero Trust implementation meets regulatory and compliance requirements; establish policies, standards, and procedures aligned with industry frameworks; coordinate security assessments with audit, risk, and compliance teams; manage vendor relationships and third-party security assessments.
• Analyze business and IT security environments to identify deficiencies or redundancies, recommend improvements, document current-state architecture, and integrate and deploy solutions that address emerging business security needs.
• Advise peers and senior and executive leadership on current and future security technologies, considering total cost of ownership, return on investment, and strategic value.
• Remain current on technology trends, market changes, and business needs, and collaborate with security and IT leaders on strategies, special projects, and complex security challenges.
• Maintain on-call availability for security incidents and escalations; travel off site for annual team gatherings, conferences, or critical vendor meetings as needed.

Benefits

• Option to participate in a variety of health, financial, and security benefits.
• May be eligible for the Management Incentive Program as part of the Total Rewards package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior