Security Director Jobs

About The Position

Requirements

• At least 10 years of cybersecurity experience, including leadership of multidisciplinary programs and significant exposure to data privacy.
• Experience as a CISO, Head of Security, or in an equivalent executive role.
• Proven ability to design and operate durable security operating models.
• Strong knowledge of security frameworks such as NIST, ISO 27001, and CIS, and privacy laws such as PIPEDA and CCPA/CPRA.
• Experience leading incident response and breach management.
• Experience working in regulated, growth-oriented environments.
• Ability to represent complex security perspectives to senior leadership and external stakeholders.
• Strong judgment in balancing risk, cost, and long-term sustainability.
• Experience in cloud security (AWS, Azure, or GCP) and modern architecture.
• Maintain at least one cybersecurity certification, such as CISSP, CISA, or CISM.

Responsibilities

• Own the cybersecurity roadmap and guide the program’s evolution over multiple years.
• Translate business objectives and technology strategy into practical security priorities, balancing risk reduction, operational efficiency, and business agility.
• Establish and mature practical, scalable governance processes integrated into company operations.
• Define and maintain security architecture principles and standards across on-premises, cloud, SaaS, and internally developed platforms, including the ERP.
• Promote consistent control design and embed security early in technology and application decisions.
• Manage and advance the data privacy program in collaboration with Legal, and serve as the organization’s Data Protection Officer.
• Establish data governance, classification, retention, and protection practices; maintain an inventory and mapping of customer, vendor, employee, and logistics data flows.
• Lead privacy impact assessments and embed privacy-by-design into systems and processes.
• Manage data subject access, deletion, and correction requests; oversee privacy practices involving employee data and applicable employment-related privacy obligations.
• Provide guidance on monitoring technologies and workplace data, and assess the operational impact of evolving privacy regulations.
• Lead security operations, including threat detection, vulnerability management, endpoint security, and incident response.
• Own the incident response program and lead security incidents; coordinate breach notifications with Legal and Communications.
• Conduct post-incident reviews, improve response processes, and provide executive leadership with regular reporting on cyber risk, incidents, and remediation.
• Own the Cyber Insurance Program.
• Partner with technology, Legal, data, and business leaders to establish practical AI security and risk management, including guardrails for internal solutions and third-party AI features.
• Identify and manage AI risks involving data exposure, model misuse, access control, and integrity; define policies and controls for responsible AI adoption.
• Partner with IT, Legal, Compliance, and Finance on PCI, SOX, future assurance activities, regulatory inquiries, and investigations.
• Design maintainable controls and promote repeatable audit readiness.
• Own and enforce the maintenance and testing of business continuity and disaster recovery plans.
• Lead and develop the internal security team across engineering, privacy, and compliance; establish expectations, priorities, and development paths, and make cases for team growth or external augmentation when appropriate.
• Establish security and privacy governance; collaborate with product, engineering, and business teams on secure and privacy-conscious innovation.
• Lead organization-wide security awareness and privacy training programs and policies.
• Manage third-party and vendor risk, including security and privacy assessments.
• Serve as the primary security partner to IT leadership and senior engineering leaders; explain risks and tradeoffs in business terms and build trust and alignment.
• Expand strategic influence as the business grows and adapt the security program to new technologies and risks while emphasizing durable outcomes.

Benefits

• Health insurance coverage
• Dental insurance coverage
• Vision insurance coverage
• Retirement planning options
• Employee apparel discounts
• Professional growth opportunities
• Employee appreciation events
• State-of-the-art equipment and resources
• Bonus potential