Senior Director of Cybersecurity

Catholic Charities of the Archdiocese of Chicago • Chicago, IL

12d

About The Position

The Senior Director of Cybersecurity is responsible for the hands-on administration, monitoring, and continuous improvement of the organization's cybersecurity controls, platforms, and operations. This role leads vulnerability management, penetration testing, identity security, cloud security, endpoint protection, and incident response activities while providing cybersecurity recommendations and technical guidance to Information Technology leadership.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field.
• Minimum 10 years of progressive cybersecurity experience.
• Minimum 5 years of experience leading cybersecurity programs, security operations, or cybersecurity teams.
• Experience managing enterprise cybersecurity technologies and security operations.
• Demonstrated experience leading cybersecurity initiatives and technical teams.
• Strong knowledge of cybersecurity operations, vulnerability management, penetration testing, identity security, cloud security, and incident response.
• Experience with Microsoft Azure, Microsoft 365 Security, Microsoft Entra ID, CrowdStrike, and Zscaler.
• Experience with SIEM, SOAR, EDR, vulnerability management, and security monitoring platforms.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to communicate technical concepts to both technical and non-technical audiences.
• Ability to prioritize cybersecurity risks and develop actionable remediation strategies.

Nice To Haves

• Master's degree in Cybersecurity, Information Technology, Business Administration, or related field.
• Experience working within nonprofit, healthcare, social services, or mission-driven organizations.
• Experience implementing cybersecurity frameworks such as NIST Cybersecurity Framework or CIS Controls.
• 12+ years of progressive cybersecurity experience.
• Experience implementing Zero Trust security architectures.
• Experience managing cybersecurity audits and compliance assessments.
• Experience developing executive cybersecurity metrics and board-level reporting.
• Experience managing third-party cybersecurity risk programs.
• Experience with AI-driven security tools and automated penetration testing platforms.
• CISM (Certified Information Security Manager)
• CCSP (Certified Cloud Security Professional)
• GIAC Security Certifications
• Microsoft Cybersecurity Architect Expert
• Microsoft Azure Security Engineer Associate
• CrowdStrike Certifications
• Zscaler Certifications

Responsibilities

• Lead the administration, monitoring, and continuous improvement of the organization's cybersecurity controls, platforms, and security operations, providing technical guidance and risk-based recommendations that strengthen the overall security posture.
• Maintain primary responsibility for the implementation, configuration, health, and optimization of cybersecurity technologies including CrowdStrike, Zscaler, Microsoft Defender, Microsoft Entra ID, Azure security services, SIEM, SOAR, endpoint protection, identity security, and threat detection platforms.
• Manage enterprise vulnerability management, AI-driven penetration testing, security assessments, remediation activities, and security validation efforts, working with Information Technology teams to identify, prioritize, and resolve security risks across servers, endpoints, mobile devices, cloud environments, and infrastructure systems.
• Perform hands-on security operations activities including threat monitoring, incident response, security investigations, cyber recovery planning, alert management, and coordination with internal stakeholders, managed security providers, auditors, consultants, and incident response partners as needed.
• Partner closely with infrastructure, applications, help desk, data, and business teams to implement security controls, support regulatory and compliance requirements, remediate vulnerabilities, secure cloud and enterprise systems, and provide cybersecurity guidance for technology initiatives and projects.
• Develop and maintain cybersecurity metrics, operational dashboards, risk reports, and remediation tracking that provide visibility into security posture, vulnerability trends, patch compliance, threat activity, and recommendations for cybersecurity improvements and future investment priorities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior