Director of IT Security (Strategy & Transformation)

Join our team as the Director of IT Security (Strategy & Transformation). In this senior leadership role, you will define, operationalize, and govern the enterprise security strategy in alignment with business objectives, regulatory requirements, and evolving technology landscapes. You will partner closely with technology executives, business leaders, and key stakeholders to translate security vision into measurable outcomes, scalable operating models, and sustainable risk reduction. This highly cross-functional role combines security strategy, enterprise transformation, program leadership, operating model design, and executive advisory capabilities.

• Defining, operationalizing, and governing the enterprise security strategy in alignment with business objectives and regulatory requirements.
• Partnering closely with technology executives and business leaders to translate security vision into measurable outcomes and sustainable risk reduction.
• Driving strategic initiatives that strengthen the organization's security posture while enabling innovation, business growth, and operational agility.

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Risk Management, Business Administration, or a related field
• Deep knowledge of cybersecurity, risk, compliance, and governance frameworks, including NIST CSF, NIST 800-53, ISO 27001, COBIT, SOX, HIPAA, and PCI DSS
• Experience developing executive and board-level communications related to security, risk, transformation, and investment outcomes
• Ability to translate complex technical, regulatory, and risk requirements into clear business outcomes and recommendations
• Demonstrated success designing, scaling, and governing enterprise security programs, including IAM, cloud security, vulnerability management, insider risk, privacy, and resilience initiatives
• Proven success leading organizational change, technology transformation, and cross-functional strategic initiatives
• Familiarity with regulatory and compliance requirements across multiple regions, including the United States, European Union, and APAC
• Strong experience in operating model design, portfolio governance, strategic planning, and KPI-driven performance management
• Experience designing and implementing automated workflows, integrations, reporting solutions, and operational dashboards
• Proven experience partnering with CISO, CIO, CTO, or equivalent executive leaders within large, complex organizations
• Exceptional communication, stakeholder management, and executive presentation skills
• 10+ years of experience in security strategy, enterprise transformation, technology risk, program leadership, management consulting, or related disciplines with progressively increasing responsibility
• Strong analytical, strategic thinking, and problem-solving capabilities with the ability to balance risk, operational efficiency, and business objectives
• Knowledge of IT operational processes, including change management, incident management, and service management practices
• Master's degree in Cybersecurity, Information Systems, Business Administration (MBA), or a related field
• Industry certifications such as CISSP, CISM, CRISC, CGEIT, PMP, or equivalent
• Experience within highly regulated industries, including healthcare, financial services, software, or technology organizations
• Experience supporting enterprise AI governance, responsible AI initiatives, and security strategy for emerging technologies