When you join Hines, you will embark on a career journey fueled by vision and guided by leaders who set the standards of our industry. Our legacy is rooted in innovation and excellence, earning us a spot on Fast Company’s esteemed annual list of the World’s Most Innovative Companies, as well as recognition as one of U.S. News & World Report’s Best Companies to Work For in 2024. Discover endless opportunities to grow and make your mark at Hines. The Senior Director, Cybersecurity is a strategic leader with hands-on in-the-trenches experience responsible for the design, implementation, and governance of enterprise security solutions across cloud, on-premises, and end-user environments. This role develops and maintains a comprehensive security architecture that protects user devices, collaboration platforms, productivity suites, identity systems, and core infrastructure—ensuring secure, resilient, and compliant security operations for all employees and business units. The Director leads a team of security engineers and architects, drives adoption of modern security frameworks (such as Zero Trust), and partners with IT, business, and compliance stakeholders to embed security into daily operations and technology initiatives, in alignment with various compliance frameworks such as NIST, ISO 27001, SOC 2, SOX, GDPR, CCPA, and internal security policies. This position will be responsible for four primary functions: Security Architecture/Design Security Engineering/Implementation Security Enforcement/Adherence (Governance) Escalated Incident Response (Escalations from Security Operations Center) Across the following areas: Cloud & On-Premise Microsoft Azure anything related to security Microsoft Entra and On-premise Active Directory Microsoft M365 SaaS/In-house applications Data Protection & Privacy Data Loss Prevention (DLP) solutions, encryption (Azure Key Vault, BitLocker), files and folder sharing, and privacy controls (GDPR, CCPA, NIST Privacy Framework) Ensure secure handling of user data across devices, cloud storage, and collaboration platforms Endpoint & Network Security Endpoint protection Artic Wolf Aurora, Microsoft Defender, web filtering, and secure email gateway solutions Securing AI Providing a security framework in which to utilize IT for Security and Business operations Vulnerability Management Identifying vulnerabilities and prioritize remediation, patch management, penetration testing, etc. Application Security /Develop Security Operations Strengthening the security posture for the production application and development environments Identity and Access Management Framework of policies and technologies for identifying, authenticating, and controlling user access to applications, systems, and networks Cyber Threat Intelligence Work with the SOC to integrate CTI best practices for threat feeds and mechanisms Operational Technology Partner with various groups to update OT policies Security Awareness Continuously improve the enterprise-wide security awareness and training program to foster a security-first culture among all employees and contractors Customize security messaging for diverse audiences, including remote workers, executives, IT staff, and business users, ensuring relevance to current threats and organizational priorities Measure program effectiveness through behavioral analytics, participation metrics, and simulated attack results; report findings to leadership and refine strategies accordingly Collaborate with HR, IT, and business units to automate onboarding/offboarding training workflows and deliver role-based content Promote proactive reporting of suspicious activity and empower users to act as the first line of defense against cyber threats