Director of Enterprise Security

Director Of Enterprise Security

Required Skills & Experience: Bachelor's degree in Computer Science, Information Security or a related field, or equivalent experience. 10+ years in cybersecurity, including 5+ years leading security managers and teams. A track record of moving a security organization from gatekeeping to embedded, DevSecOps-style delivery. Strong SOC and incident response background, including managing MDR/MSSP providers, SIEM/SOAR, and security automation or AI-driven operations. Deep knowledge of identity and privileged access (Entra ID/AD, PAM, IGA). GRC experience with PCI DSS, NIST CSF and CIS. Experience with telecom regulation (CPNI, FCC) is strongly preferred. Working knowledge of cloud security, CI/CD and infrastructure-as-code. Data-driven: defines and reports KPIs such as MTTD, MTTR, remediation SLA and compliance posture. Excellent communicator who can explain technical risk to executives and teams.

Nice to Have Skills & Experience: CISSP, CISM or CCSP. Experience in telecom, MVNO or consumer subscription businesses, or other regulated consumer-data environments.

Job Description: This Director of Enterprise Security will lead the transformation and execution of an organization-wide cybersecurity strategy, with responsibility for building a modern, scalable security program that is embedded into technology delivery and day-to-day business operations. This leader will oversee Security Operations & Resilience, Governance, Risk & Compliance, Identity & Access Governance, and DevSecOps/Application Security, while driving measurable reductions in enterprise risk.

A major focus of the role will be modernizing security operations through an automation-first, AI-assisted approach, strengthening incident response, threat detection, vulnerability management, cyber recovery, and overall operational resilience. This individual will also advance an identity-first security strategy, including least-privilege access, privileged access management, automated access lifecycle processes, and stronger governance surrounding enterprise identities and credentials.

From a governance perspective, the Director will own the broader risk, compliance, third-party risk, data protection, and security awareness programs, with an emphasis on moving toward continuous and automated compliance. On the engineering side, this leader will establish and mature DevSecOps and Application Security capabilities, integrating security testing and controls into CI/CD pipelines and enabling development teams with secure patterns, guardrails, and self-service capabilities. The role will also partner closely with infrastructure and engineering teams to strengthen Azure/AWS cloud security, infrastructure-as-code controls, Zero Trust principles, and emerging AI security governance.

This person will lead a lean, experienced security organization, manage strategic security partners and vendors, own budget and forecasting responsibilities, and communicate security posture, risk, and program results to executive leadership. The ideal candidate is a decisive, hands-on security leader who can balance strategy with execution, simplify how the business engages with security, and build a security operating model that enables innovation without compromising protection or resilience.