Senior Director, Cybersecurity Operations & Compliance

Roles and Responsibilities
-
Develop the compliance roadmap and lead SOC 2 and ISO 27001 certification programs.
-
Collaborate with the Identity and Access Management team to strengthen the company’s identity posture and AI governance guardrails.
-
Direct the End-User Services team in deploying endpoint protection solutions, including mobile device management, conditional access, verified identity, and related security capabilities.
-
Develop and operate a comprehensive threat and vulnerability management program.
-
Develop and manage a comprehensive threat hunting, event analysis, and incident response capability.
-
Perform detailed and complex security analysis, including malware analysis.
-
Provide technical leadership for all relevant information security platforms.
-
Serve as the final escalation point for threat hunting, event detection and analysis, and incident response.
-
Oversee and directly participate in the administration of the firm’s SIEM and other relevant information security technology platforms.
-
Lead the response to and containment of information security-related incidents.
-
Ensure indicators of attack and indicators of compromise are promptly integrated into relevant systems and platforms.
-
Manage threat intelligence sources, including both human-readable and machine-readable intelligence.
-
Partner with IT, Legal, and Internal Audit to develop and maintain security best practices and policies for internal systems.
-
Play a primary role in the selection of new information security technologies.
-
Support the development of information security team members and facilitate knowledge transfer to other IT and firmwide groups.
Job Requirements
-
10+ years of experience in cybersecurity operations, including 5+ years leading cybersecurity teams at the manager, director, or higher level.
-
Proven experience owning enterprise cybersecurity strategy, including capital and operating budgets.
-
Deep hands-on expertise across all aspects of a comprehensive cybersecurity program.
-
Experience managing hybrid environments that span on-premises or colocation infrastructure and at least one major cloud platform, such as AWS, Azure, or GCP.
-
Deep knowledge of and experience with industry compliance programs, including SOC 2, ISO 27001, GDPR, DORA, and related frameworks.
-
Strong foundation in disaster recovery, business continuity, and high-availability architecture.
-
Experience with infrastructure automation, configuration management, and modern operations practices.
-
Track record of building, leading, and retaining high-performing technical teams.
-
Legally authorized to work in the United States.