Director, Information Security
Core
Lead the Information Security program, advise leadership on strategy, and oversee risk management, compliance, and incident response for a financial institution.
Role type
Director, Information Security (Strategic leadership with hands-on oversight)
Builds
Resilient security posture, mature security policies, and risk governance aligned with business objectives
Domain
Financial services / Cybersecurity
Required skills
Cybersecurity strategy, GRC frameworks, incident response, risk assessment, third-party risk management, cloud security, identity and access management, vulnerability management, regulatory compliance, security budget planning
Preferred skills
CISSP, CISA, CISM, GIAC, CRISC certifications, AI risk governance
Technologies
SIEM, antivirus, antimalware, endpoint protection, cloud platforms, network security tools
Responsibilities
Advise leadership on cybersecurity strategy and develop the security program; Maintain resilient security posture against evolving threats; Administer security risk assessments and monitor key risk indicators; Direct third-party risk management and vendor due diligence; Conduct identity and access governance reviews; Serve as liaison to regulators and external auditors; Oversee incident response, investigations, and root-cause analysis; Manage vulnerability reporting and remediation; Oversee key cybersecurity technologies and provide threat intelligence; Manage employee security awareness and compliance training; Partner with departments to integrate security into business processes; Supervise up to two employees
Seniority
Director, strategic leadership with management responsibilities