Sr Director, Cyber Security

Wheels Up • New York, NY

1d • $240,000 - $273,000

About The Position

In this role, the Senior Director of Cyber Security is responsible for leading and executing the company’s end-to-end cyber defense strategy. This role owns all aspects of cybersecurity operations, including threat detection and response, incident forensics, security monitoring, third-party risk management, and employee security education. The role serves as the senior authority on cybersecurity risk and may function as a de facto or former Chief Information Security Officer (CISO) within a small to mid-sized organization.

Requirements

• 10+ years of progressive experience in cybersecurity, including leadership roles.
• Demonstrated experience operating an enterprise-wide cybersecurity program.
• Strong technical depth and familiarity with leading technologies such as Microsoft Azure, Microsoft M365, Email Security Technology (Proofpoint), and CDN Technology (Cloudflare).
• Prior experience serving as or equivalent to a CISO in a small to mid-sized organization preferred.
• Strong expertise in security operations, incident response, and digital forensics.
• Proven experience managing third-party security vendors and MSSPs.

Nice To Haves

• Bachelor’s degree in Information Security, Computer Science, or related field; Master’s degree a plus.
• Relevant certifications such as CISSP, CISM, CRISC, or equivalent.
• Experience supporting cloud-based and hybrid technology environments.
• Strong executive communication and stakeholder management skills.

Responsibilities

• Cybersecurity Strategy & Governance
• Own and continuously evolve the enterprise cybersecurity strategy aligned with business objectives and risk tolerance.
• Establish and maintain cybersecurity policies, standards, procedures, and governance frameworks.
• Define the long-term security roadmap covering people, process, and technology investments.
• Serve as the primary executive advisor on cybersecurity risk to senior leadership and, where applicable, the Board.
• Security Operations, Monitoring & Threat Management
• Oversee day-to-day cybersecurity operations and real-time monitoring of security events across all environments.
• Ensure effective operation of security technologies including SIEM, EDR, IAM, vulnerability management, and threat intelligence tools.
• Proactively identify, assess, and remediate vulnerabilities and emerging threats.
• Establish and track security KPIs and metrics to measure program effectiveness and maturity.
• Incident Response & Digital Forensics
• Lead all cybersecurity incident response activities from detection through recovery and post-incident review.
• Direct digital forensics investigations related to data breaches, insider threats, or policy violations.
• Maintain, test, and improve incident response playbooks and escalation procedures.
• Coordinate response efforts with IT, Legal, Compliance, HR, external partners, and law enforcement as required.
• Third-Party Risk & Vendor Management
• Own relationships with cybersecurity vendors, MSSPs, and external consultants.
• Evaluate, select, and manage security tools and service providers for effectiveness and scalability.
• Lead third-party risk assessments and vendor security reviews.
• Ensure ongoing monitoring of vendor performance and compliance with security requirements.
• Employee Security Awareness & Education
• Design and oversee a comprehensive cybersecurity awareness and training program.
• Ensure completion of employee security training, annual certifications, and policy acknowledgements.
• Promote a strong security culture through onboarding, communications, and leadership engagement.
• Continuously adapt education programs to address evolving threats such as phishing and social engineering.
• Risk Management, Compliance & Audit
• Conduct regular cybersecurity risk assessments and maturity evaluations.
• Ensure compliance with applicable regulatory, legal, and contractual requirements.
• Partner with internal and external auditors to support security audits and remediation.
• Maintain documentation and evidence for audits, certifications, and regulatory inquiries.
• Leadership, Collaboration & Reporting
• Lead, mentor, and develop cybersecurity staff and managed service teams.
• Collaborate with IT, engineering, legal, compliance, HR, and business leaders.
• Prepare and present regular cybersecurity risk and performance reports to executives.
• Act as the senior escalation point for critical cybersecurity risks and incidents.

Benefits

• Tuition Reimbursement
• Competitive 401(k)
• Comprehensive Medical, Dental, and Vision Insurance
• Complimentary access to mental health and wellness counseling through Spring Health
• A variety of additional programs and services in support of your total well-being

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Number of Employees: 501-1,000 employees