Director of Information Security

Job Summary

The Director of Information Security will lead and scale Opensity’s client-facing managed security operations. Reporting to the EVP of Technology Enabled Solutions, this role requires hands-on leadership of a security team, managing tools and processes, and acting as a trusted advisor to clients.

About the Role

Opensity provides modernized technology platforms and elevated technology support to help our clients, including law firms, financial institutions, and corporations, excel in what they do best. We are seeking a Director of Information Security to lead and scale our client-facing managed security operations.

Responsibilities

• Lead the team

• Manage a team of security engineers delivering managed security operations, incident response support, and security tooling for clients

• Set clear operating standards for escalations, documentation, and service quality

• Build career paths and technical development plans for your team

• Own security operations

• Oversee daily SOC-supporting services: alert triage, investigation, escalation, remediation tracking, and client reporting

• Lead major incident response, including executive communication, containment coordination, and post-incident reporting

• Cook up with Legal, Corporate InfoSec, cyber insurance, and external DFIR partners when needed

• Own the tooling

• Evaluate new security technologies and automation opportunities

• Partner with Engineering to improve integrations across security, monitoring, and ticketing systems

• Be a client advisor

• Act as a trusted advisor on risk reduction, security posture, and incident readiness

• Lead QBRs, service reviews, and executive briefings

• Translate complex security issues into clear business language for client and internal leadership

• Support RFPs, proposals, and security-related solution design with Account Management and Sales

• Drive process and reporting

• Build service delivery processes aligned to ITIL and SOC best practices

• Develop KPIs and reporting on alert volumes, incident trends, response times, and tool health

• Identify and close gaps in staffing, tooling, and client coverage

Requirements

• Bachelor's degree in IT, Cybersecurity, Computer Science, or equivalent experience

• 7+ years in cybersecurity, security operations, or infrastructure security, including 3+ years leading technical security teams

• MSP, MSSP, or client-facing technology services background

• Strong grasp of SOC operations, incident response, vulnerability management, and cloud/on-prem infrastructure (Azure, networking, Active Directory, Entra ID, Intune)

• Hands-on or leadership experience with platforms like Rapid7, Microsoft 365 security tools, Defender, Cisco Umbrella, or Mimecast

• Comfort communicating with executives, clients, and technical teams alike

Qualifications

• Nice to have:

• Experience leading managed SOC or MDR services

• Familiarity with NIST CSF, CIS Controls, or ISO 27001

• CISSP, CISM, Security+, CySA+, or equivalent

• ServiceNow experience

• Background supporting legal, financial services, or other regulated industries