Cybersecurity Partner

You will define the enterprise cybersecurity strategy, operating model, roadmap, and architecture. You will establish governance, control frameworks, risk management, security operations, identity governance, and incident-response capabilities. You will advise executives and the board, manage vendors and budgets, lead material incident decisions, and recruit and develop internal security specialists.

Responsibilities

• Define the enterprise cybersecurity strategy, operating model, roadmap, and security architecture
• Establish security priorities, risk tolerances, investment requirements, and success measures
• Advise executive leadership and the board on risks, incidents, control maturity, and remediation
• Establish and govern security control frameworks
• Own the governance, risk, compliance, audit-readiness, and third-party assessment programs
• Set defense-in-depth architecture across identity, networks, endpoints, cloud, SaaS, data, APIs, CI/CD, and industrial environments
• Build and lead security operations capabilities
• Lead identity and access governance
• Lead cyber incident and breach management
• Manage security vendors, MSSPs, contracts, budgets, and service levels
• Establish security awareness, training, and anti-phishing programs
• Recruit, mentor, and grow the internal security team
• Define and assess security program metrics and maturity

Requirements

• 8+ years of progressive cybersecurity or information security experience
• Significant experience as a security leader, head of security, CISO, or equivalent enterprise security owner
• Experience building or transforming a cybersecurity program in a complex, fast-growing, or publicly traded organization
• Knowledge of security architecture, cloud and SaaS security, IAM, network security, endpoint security, data security, and industrial control environments
• Experience with security control frameworks, audits, and assessments
• Experience leading SIEM or SOC, EDR, vulnerability management, incident response, identity governance, and security engineering programs
• Experience securing APIs, CI/CD pipelines, cloud and data architectures, and AI or compute environments
• Experience managing security budgets, vendors, MSSPs, contracts, and executive trade-offs
• Experience leading material incidents and communicating with executives, board members, regulators, and legal counsel