Director, Cybersecurity

Summary

The Cyber Security Director at VG is a senior-level executive responsible for overseeing VGLNG's entire cybersecurity strategy, including the design, implementation, and maintenance of security protocols to protect critical data and infrastructure, managing a team of security professionals, and ensuring compliance with industry regulations, all while staying updated on emerging cyber threats and vulnerabilities; essentially acting as the primary leader in safeguarding the organization's digital assets.

Responsibilities

• Manage, configure, and optimize security policies, data protection, and encryption across the Microsoft Azure ecosystem.
• Oversee the continuous tuning and deployment of Azure-native security tools, including Microsoft Purview, Microsoft Defender for Cloud, Microsoft Intune, and Microsoft Entra ID.
• Enforce Zero Trust architecture, conditional access policies, and Privileged Identity Management (PIM) within the Azure environment.
• Provide security expertise on prioritizing and managing cybersecurity risks and initiatives.
• Escalate and manage cyber security risk.
• Lead the incident response team in managing and mitigating cyber security incidents, including breach investigations and containment actions.
• Oversee the design and implementation of security architectures across the organization's IT infrastructure, including network security, endpoint protection, and data encryption.
• Ensure adherence to relevant cybersecurity regulations and industry standards, including data privacy laws. Staying current on the changing regulatory environment and understanding the impacts to the organization.
• Develop and deliver cybersecurity awareness training programs for employees at all levels to promote best practices.
• Regularly communicate cybersecurity status updates to executive leadership and stakeholders, including key performance indicators (KPIs) and threat intelligence.

Qualifications

• Bachelor's degree or equivalent experience in computer science, or management information systems.
• 15 or more years of professional hands-on experience solving business problems with technology solutions at an energy facility or related industry.
• Deep understanding of cybersecurity principles, including network security, application security, threat intelligence, incident response, and vulnerability management.
• Proven experience managing cybersecurity teams and projects.
• Strong leadership and communication skills to effectively collaborate with cross-functional teams and senior executives.
• Expertise in relevant cybersecurity frameworks like NIST CSF, ISO 27001, MTSA and GDPR.
• Experience with information technology audit or compliance management and performing security risk assessments.
• Knowledge of emerging cybersecurity threats and latest technologies including AI.
• Relevant cybersecurity certifications (CISSP, CISA, CISM) preferred.
• Strong analytical and problem-solving skills to identify and respond to cyber threats.
• Excellent communication and collaboration skills to work with cross-functional teams.
• Self-motivated and directed, with the ability to effectively prioritize and execute tasks in a high-pressure environment.