(USA) Director, Information Security

About the role

The Director, Enterprise Cryptographic Services & Secure Data Transfer, leads the development and execution of comprehensive cybersecurity strategies to safeguard organizational assets and data. This role involves managing cyber risk assessments, implementing security controls, and ensuring compliance with regulatory standards. The position requires collaboration across functions to address emerging threats, enhance security frameworks, and drive continuous improvement in information security practices. The Director will also guide teams in identifying vulnerabilities, evaluating risk treatments, and fostering a secure environment aligned with business objectives and industry best practices.

What you'll do

• Strategic Leadership: Execute enterprise strategy, multi-year roadmaps, and modernization for CLM, secure data transfer, and SSH key management.
• Governance & Operations: Establish machine identity risk frameworks, ensure strict regulatory compliance, monitor operational SLOs, and lead critical incident management.
• Stakeholder & People Focus: Partner cross-functionally to translate technical risks into business recommendations, while leading and developing a team of engineers

Minimum Qualifications

• Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 6 years' experience in information security or related area at a technology, retail, or data-driven company.
• Option 2: 8 years' experience in information security or related area at a technology, retail, or data-driven company. 3 years' supervisory experience.

Preferred Qualifications

• Certification in Security+, GISF, CISM, or CISA, Master’s degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area and 4 years’ experience leading information security or cybersecurity projects,
• We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly.