Director of Enterprise Security (Cybersecurity)

TL;DR

Director of Enterprise Security (Cybersecurity): Leading enterprise security operations and strategy across architecture, governance, risk management, and security solutions with an accent on cloud security, AI governance, and organizational resilience. Focus on building a high-performing security function, managing complex incident response and vulnerability programs, and translating cybersecurity priorities into enterprise-wide standards, investments, and controls.

Location: Remote within the United States

Salary: $140,000–$195,000 USD, depending on market and geographic location.

Company

Talent mobility services organization helping major global brands place employees where they are needed worldwide.

What you will do

• Lead enterprise security strategy execution, including architecture, policies, standards, procedures, third-party risk, and disaster recovery planning.
• Manage the Information Security team through hiring, coaching, performance management, and succession planning.
• Develop cybersecurity maturity roadmaps, security investment cases, and enterprise-wide security priorities with senior leadership.
• Oversee security solution selection, deployment, integration, audits, vulnerability assessments, penetration tests, and security vendor relationships.
• Drive AI governance and security programs covering responsible AI use, data leakage, model abuse, and third-party AI vendor risk.
• Lead incident investigations and security awareness initiatives while building engagement across business units.

Requirements

• 7–10 years of related experience, including at least 3 years leading or managing a security team.
• Extensive experience in enterprise security architecture and security documentation.
• Strong knowledge of the Microsoft security stack, including Entra ID, Defender, Sentinel, and Purview, as well as Windows and enterprise networks.
• Hands-on AWS and Azure cloud security experience covering containers, serverless, IAM, cloud-native applications, and workload protection.
• Experience with AI governance, security awareness training, business continuity, disaster recovery, and incident response.
• A four-year degree in information security, computer science, business administration, or a related field is preferred but not required with strong relevant experience.

Nice to have

• GIAC Security Essentials Certification.
• GIAC Security Leadership Certification.
• ISACA Certified Information Security Manager.
• (ISC)2 SCCP, CISSP, or ISSAP certification.

Culture & Benefits

• Remote work within the United States.
• 401(k) plan and medical, dental, and vision insurance.
• Employee Assistance Program, life insurance, and disability coverage.
• Paid time off, paid holidays, and volunteer paid time off.
• Commitment to diversity, equity, inclusion, belonging, and transparent compensation.