cybersecurity director

The Office of the Chief Financial Officer (OCFO)

<div>
 
 
 Government of the District of Columbia
 
 
 
 
 Office of the Chief Financial Officer (OCFO)
 
 
 
 
 
 
 
 
 Director Information Technology Security
 
 
 
 (CISO /Cyber Security Leader &amp; Operations)
 
 
 
 $176,948.00 - $214,712.00 Annually
 
 
 
 
 Washington DC
 
 
 
 
 
 
 The Office of the Chief Financial Officer (OCFO) is the steward of the Government of the District of Columbia&rsquo;s (District&rsquo;s) finances. Since its creation in 1996, OCFO&rsquo;s mission is to ensure the financial integrity and long-term fiscal health of the District. OCFO accomplishes this mission by ensuring balanced budgets, unqualified or &ldquo;clean&rdquo; audit opinions, and access to quality credit markets with high and improving bond ratings.
 
 
 
 
 
 OCFO&rsquo;s operational responsibilities include forecasting the District&rsquo;s revenues and financial condition, developing and managing the District&rsquo;s budget, administering the District&rsquo;s taxes, and executing and recording the District&rsquo;s financial transactions. In addition, OCFO administers the District&rsquo;s lottery and gaming programs, and oversees the finances of the University of the District of Columbia and the Washington Convention and Sports Authority (Events DC).
 
 
 
 
 
 We are searching for a
 
 Director of Information Technology Security.
 
 This position is in the Office of the Chief Financial Officer (OCFO), Office of the Chief Information Officer (OCIO). The incumbent is responsible for establishing and managing the OCFO&rsquo;s security strategy and programs to ensure the protection of both physical and informational assets.
 
 
 
 
 
 
 Duties include, but are not limited to:
 
 
 <ul>
 <li>
 Develop and lead the enterprise-wide security strategy
 </li>
 <li>
 Direct the development, implementation, and enforcement of security policies, standards, and procedures, overseeing cybersecurity operations, including threat detection, incident response, vulnerability management, and data protection.
 </li>
 <li>
 Oversee cloud and vendor-hosted platforms security initiatives; executing disaster recovery and business continuity planning and testing; defining security requirements in contracts.
 </li>
 <li>
 Provide strategic guidance on security requirements for new systems; developing and delivering security awareness and training programs; and supervising and mentoring security staff.
 </li>
 <li>
 Performs other related duties as assigned
 </li>
 </ul>
 
 
 
 
 
 Minimum Qualifications
 
 
 
 Eight (8) years of progressive experience managing and directing enterprise information security programs in a government or complex organization; leading, developing, and implementing security policies, standards, and enterprise security strategies; developing and managing cybersecurity programs; overseeing vendor security requirements and contract compliance; and providing technical advisory support for risk management and disaster recovery. Experience must also include leading security awareness or training programs, conducting and overseeing security audits, coordinating with senior leadership and external stakeholders, and at least two (2) years of supervisory experience over technical and managerial staff.
 
 
 
 
 
 For initial review, please submit your resume to
 
 anita.tolani@dc.gov
 
 or to the Office of the Chief Financial Officer, Human Resources Division, located at 1101 4th Street, SW, Suite W220, Washington, DC 20024.
 
 
 
 
 
 To complete an application or for additional details related to this vacancy, please visit www.cfo.dc.gov and reference announcement number: 26-IT-OCIO-0006.
 
 
 
 
 
 The OCFO offers a competitive salary and benefits package including medical, dental, retirement, and educational assistance.
 
 
 
 
 
 
 The Office of the Chief Financial Officer is an EQUAL OPPORTUNITY EMPLOYER
 
 
</div>

Director Information Technology Security (CISO)

The Home Depot

<div>Position Purpose:
Protecting what matters most to our associates and consumers by securing our sensitive data and critical assets from current and emerging threats. At The Home Depot, Cybersecurity consists of Architecture, Governance, Identity &amp; Access Management, Internal Threat Operations, Issue and Compliance Management, Risk Assessment/Advisory, Security Consulting, Security Operations, Service Optimization and Strategic Planning. 
Key Responsibilities:<ul><li>
100% Deliver Execution, Plans &amp; Aligns, Develop Others - Collaborate cross functionally to reduce vulnerabilities, risk and incident management; Drive cross-functional alignment; Asses, develop, implement and maintain strategies to assess and resolve security risk across the enterprise; Provide leadership, mentoring and coaching to direct reports and other leaders</li></ul> 

Direct Manager/Direct Reports:<ul><li>
This position typically reports to Director or Sr. Director</li><li>
This position has 6-10 Direct Reports</li></ul> 

Travel Requirements:<ul><li>
Typically requires overnight travel less than 10% of the time.</li></ul> 

Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 

Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul> 

Preferred Qualifications:<ul><li>
4+ years of previous leadership experience</li></ul> 

Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul> 

Preferred Education:<ul><li>
No additional education</li></ul> 

Minimum Years of Work Experience:<ul><li>
8</li></ul> 

Preferred Years of Work Experience:<ul><li>
No additional years of experience</li></ul> 

Minimum Leadership Experience:<ul><li>
None</li></ul> 

Preferred Leadership Experience:<ul><li>
None</li></ul> 

Certifications:<ul><li>
None</li></ul> 

Competencies:<ul><li>
Decision Quality</li><li>
Ensures Accountability</li><li>
Plans and Aligns</li><li>
Develops Talent</li></ul></div>

Cybersecurity SR Manager | Cyber Threat Investigations and Offensive Security

PSEG

<div>Requisition: 82810 
 
PSEG Company: PSEG Services Corp. 
 
Salary Range: $ 161,200 - $ 299,400 
 
Work Location Category: Hybrid Flexible 
 
We&rsquo;re one of the country&rsquo;s largest energy companies, with a vision of powering a future where people use energy more efficiently and it&rsquo;s safer and delivered more reliably than ever. We&rsquo;re also deeply connected to the communities we serve, with more than 13,000 employees working together to support our customers and make a difference every day. 
Here, you&rsquo;ll have the stability and exciting opportunities that come with being a Fortune 500 company &mdash; along with a supportive, friendly work environment where your contributions are valued. 
We know life isn&rsquo;t one-size-fits-all, and neither is work. That&rsquo;s why we offer flexible work options depending on the role. 
In support of this model, roles have been categorized into one of three work location categories: 
1. Onsite &ndash; roles where employees are expected to be onsite daily. 
2. Hybrid fixed &ndash; roles that are a mix of remote work and onsite work fixed days each week 
3. Hybrid flexible &ndash; roles that are a mix of remote work and onsite work, but the onsite requirements have greater flexibility. (i.e. 5-8 days a month vs. set days each week). 
As an employee, if you are regularly scheduled to work 20 or more hours per week, you will have access to a wide range of comprehensive benefits from day one, designed to support your total well-being: medical, dental, vision, parental leave and family leave programs, behavioral health programs, 401(k) with company match, life insurance, tuition reimbursement, and generous paid time off.
More than 13,000 people already call PSEG their work home, taking pride in providing safe, reliable service to millions of customers. If you&rsquo;re looking for a place where you can build a meaningful career and help power and support our communities, we&rsquo;d love to welcome you to the team. 
PSEG is not offering visa sponsorship for this position.<div><div><div><h2 class="jobSectionHeader"> 
Job Summary</h2></div><div><div>
The Director, Cybersecurity Operations leads the development, implementation, and ongoing coordination of enterprise-wide cybersecurity operations, including Threat Engineering, Threat Detection, Cybersecurity Industry Threats Coordination, Endpoint Security, Network Security, Email Security, the Security Operations Center (SOC), Threat Analysis and Incident Response, Cybersecurity Logging &amp; Monitoring, Vulnerability Management, Application Security, Data Security, Insider Trust, Threat Intelligence, and Cyber Threat Hunting. (S)he coordinates across all business lines, service departments, and external risk organizations (e.g. Law Enforcement, cross-sector cyber industry trade organizations) and peer energy companies. As PSEG&rsquo;s senior leader responsible for cybersecurity operations, (s)he will also be responsible for defining and aligning cybersecurity policies, strategy, and standards, and for governing actual cybersecurity operations, including overseeing an internal SOC and manage service provider, and for maintaining an Incident Response program to ensure appropriate responses to cybersecurity incidents. During an incident, (s)he will be designed as lead cyber incident commander and will be responsible for the containment, eradication, and recovery, as applicable. (S)he will be responsible for multiple discrete projects/enhancements to build, maintain, and mature capabilities, including people, processes, and technologies. (S)he will engage across the entire IT, OT, and managed services landscapes, including leading a team across these environments. 
(S)he will spend his/her time 
<ul><li>Stopping/mitigating complex attacks, including making emergency decisions in response to active attacks outside of routine technology processes.</li><li>Executing on key operational decisions with potentially high impact affecting attacks and threats facing PSEG (e.g. spam/malware campaigns, criminal operations).</li><li>Ensuring the planning, development, implementation, and maintenance of our SOC, including partnering directly with stakeholders as a multi-disciplined team to design/deploy strategies and solutions across a variety of vendor platforms.</li><li>Acting as a SOC thought leader, consistently researching new ways to improve operations and strategy.</li><li>Ensuring adherence to cybersecurity controls, policies and standards with a focus on automation and control.</li><li>Assessing the current IT architecture, business needs, and future requirements as they relate to the SOC.</li><li>Determining cybersecurity requirements by evaluating business strategies and requirements, researching standards, conducting system security and vulnerability analyses and risk assessments, studying architectures/platforms, identifying integration issues, and preparing cost estimates.</li><li>Verifying that processes/systems comply with laws/regulatory requirements from local/national governments.</li><li>Preparing for, and potentially presenting at, Cyber Council, Senior Executive Team, and Board of Directors meetings.</li><li>Preparing senior-level technical reports for executive management.</li><li>Engaging in ongoing communications with peers in IT and business (e.g. Legal, HR, Security) to ensure enterprise wide understanding of cybersecurity goals, to solicit feedback and to foster cooperation.</li><li>Managing relationships with third party service providers, including contract language negotiations.</li><li>Maintaining up-to-date cybersecurity knowledge, including awareness of innovative solutions/processes, emerging standards, and new threat vectors by reading professional publications, maintaining personal networks, and participating in professional organizations.</li></ul></div></div></div><div><div><h2 class="jobSectionHeader">
Job Responsibilities</h2></div><div><ul><li>
Directs, coaches, and counsels internal/external cyber resources on Cybersecurity technologies, including Threat Engineering, Threat Detection, Cybersecurity Industry Threats Coordination, Endpoint Security, Network Security, Email Security, the Security Operations Center (SOC), Threat Analysis and Incident Response, Cybersecurity Logging &amp; Monitoring, Vulnerability Management, Application Security, Data Security, Insider Trust, Threat Intelligence, and Cyber Threat Hunting for all lines of business and service departments for both IT and OT landscapes.
</li><li>Ensure that Cybersecurity Operations service delivery aligns with the corporate IT strategy, including development of Cybersecurity operations standards, capacity planning, lifecycle management plans, solution selection, and partner management. Ensure scalability of Cybersecurity Operations capabilities, including hardware and software, to meet business needs and risk tolerances. 
</li><li>
Develops and implements best practices for PSEG Cybersecurity Operations capabilities. Participate in external risk organizations (including with peer groups) to learn from other organizations and to benchmark our program. Partner with professional Cybersecurity Operations associations, service providers, and to identify and implement best practices. 
</li><li>
Partners with and advises various IT teams. Operationalizes threat models to protect against existing and emerging threats. 
</li><li>
Builds relationships across PSEG business and technology teams. Interacts routinely with vendors, service providers, consultants/advisors, law enforcement agencies, and cross-sector cyber industry trade organizations. Ensures that cyber operations requirements are identified, well defined, properly documented, and approved by appropriate stakeholders. 
</li><li>
Develops, manages, and pre-prioritizes Cybersecurity CAPEX and OPEX budgets based on business needs and cyber threats. Lead the identification of optimal OPEX and CAPEX allocations, including opportunities to reduce expenditures while transforming PSEG Cybersecurity Operations. Lead and advise on business case development. 
</li><li>
Leads team, including performance evaluations, career development guidance, and other aspects to grow the talent pipeline and to mature our program.</li></ul></div></div><div><div><h2 class="jobSectionHeader">
Job Specific Qualifications</h2></div><div><ul><li>
Bachelors degree and 10 years of relevant cybersecurity experience, including leadership experience</li><li>
Demonstrated strong leadership and influence skills</li><li>
Demonstrated strong presentation skills with the ability to present to all levels of management and executive leadership</li><li>
Experience leading a 24x7x365 SOC/Cyber Fusion Center</li><li>
Experience managing incident response processes for incidents of all sizes and impacts</li><li>
Experience with Red Teams and with Table Top Exercises</li><li>
Experience with Vulnerability Management</li><li>
Strong knowledge of Application Security tools and concepts, including Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Penetration Testing</li><li>
Proven working experience in Security Analysis, Threat Intelligence, Email Security, and/or Endpoint Security</li><li>
Experience with Penetration Testing, including scoping, executing, reporting, and evaluating remediations</li><li>
Executive teamwork, facilitation, relationship building, and negotiation skills</li><li>
Ability to maintain positive working relationships both as a leader and as a team member</li><li>
Effective time management and multitasking skills</li><li>
Ability to communicate effectively with both technical and non-technical individuals</li><li>
Strong interpersonal communication skills, analytical abilities, detail focused, quality focused, and problem-solving skills, as well as broad knowledge of business functions, information technologies, and cybersecurity and compliance practice on a global level</li><li>
A demonstrated ability to integrate various cybersecurity, network and data protection technologies and controls into a cohesive solution that sufficiently mitigates risk</li><li>
Demonstrated experience in enterprise solutions and implementation of technology and process solutions to reduce the potential risk of data compromise and network viability</li><li>
Significant experience in cybersecurity, including hands on experience in SIEM, Email Security, and Endpoint Security tools, Threat Intelligence platforms, and potentially additional experience in forensics, offensive/defensive technologies, intelligence gathering, and/or reverse engineering</li><li>
Demonstrated experience in delivering comprehensive solutions to complex cybersecurity issues on a global scale</li><li>
Confidence in leading diverse matrix teams independently, making decisions daily as it relates to the successful delivery of the program</li><li>
Ability and insight to know when critical decisions must be raised to senior level and/or business unit management quickly to ensure that the program remains on track</li><li>
Strong knowledge of Threat Intelligence frameworks (e.g. MITRE ATT&amp;CK)</li><li>
Department of Energy&rsquo;s regulation 10 CFR 810 is required</li></ul> 
Desired<ul><li>
Industry Cybersecurity certifications (e.g. CISSP, CEH, etc.&hellip;)</li><li>
Masters in Information Security, Computer Science, Business, Engineering, or related fields</li><li>
Experience in Electric or Gas Utility or Power Generation industry, and/or experience in manufacturing</li><li>
Broad knowledge of IT and related control environments</li></ul></div></div></div> 
Some positions at PSEG require access to information covered by the Department of Energy&rsquo;s regulation 10 CFR 810 (Part 810). If applicable, the successful applicant must prove they are: (1) a citizen or national of the USA; OR (2) a lawful permanent resident of the United States (Non-Conditional Permanent I-551 / Green Card / Permanent Resident Card holder); OR (3) a citizen, national, or permanent resident of a &ldquo;Generally Authorized&rdquo; destination on the attached list not also a citizen, national, permanent resident of any country not listed; OR (4) a &ldquo;Protected Individual&rdquo; under the Immigration and Naturalization Act (8 U.S.C 1324b(a)(3)). 
As an employee of PSEG, you should be aware that during storm restoration efforts, you may be required to perform functions outside of your routine duties and on a schedule that may be different from normal operations. 
For all roles, PSEG&rsquo;s drug and alcohol testing program includes pre-employment testing, testing for cause, and post-incident/accident testing. 
Employees who are hired or transfer into a federally regulated role (including positions covered by USDOT, PHMSA, or NRC regulations) are subject to random drug and alcohol testing, inclusive of marijuana. Although numerous states throughout the country have legalized marijuana/cannabis products recreationally and medically, the use of these products are prohibited for employees in federally regulated roles. Please note that the use of CBD products may result in a positive drug test for THC/Marijuana and such use is not a legitimate medical explanation for a positive result.
If you are a current PSEG Long Island (PSEGLI) employee and offered an opportunity with PSEG or any of its subsidiaries other than PSEGLI, you will be treated as a new hire. Please note that as a new hire to PSEG, your benefits will change and generally will be consistent with other similarly situated PSEG new hires. Similarly, for PSEG employees who accept job opportunities with PSEGLI, your benefits will change and generally be consistent with other similarly situated new hires of PSEGLI. 
PSEG is an equal opportunity employer, dedicated to a policy of non-discrimination in employment, including the hiring process, based on any legally protected characteristic. Legally protected characteristics include race, color, religion, national origin, sex, age, marital status, sexual orientation, disability or veteran status or any other characteristic protected by federal, state, or local law in locations where PSEG employs individuals. 
PSEG is committed to providing reasonable accommodations to individuals with disabilities. If you have a disability and need assistance applying for a position, please call 973-430-3845 or email accommodations@pseg.com. 
If you need to request a reasonable accommodation to perform the essential functions of the job, email accommodations@pseg.com. Any information provided regarding a disability will be kept strictly confidential and will not be shared with anyone involved in making a hiring decision. 
ADDITIONAL EEO INFORMATION (Click link below) 
Know your Rights: Workplace Discrimination is Illegal</div>

Director Cybersecurity Operations

Brown University

<div>Job Description:
Director, Information Security
Office of Information Technology
Brown University
The Director of Information Security in the Office of Information Technology (OIT) is a senior leadership role within Brown University&rsquo;s Information Security Group (ISG). Reporting to the Chief Information Security Officer (CISO), the Director provides strategic and operational oversight for three critical pillars of the University&rsquo;s cybersecurity program: Security Engineering, Security Operations, and Information Compliance &amp; Risk.
The Director provides critical operational continuity in the CISO&rsquo;s absence. This role is responsible for translating institutional vision into actionable plans, ensuring that Brown&rsquo;s digital assets are protected through robust engineering, that security incidents are managed with precision, and that the University maintains a rigorous posture regarding IT risk and regulatory compliance.
Acting as a key liaison between technical practitioners, University leadership, and administrative departments (including the Office of General Counsel and Brown Risk, Audit, and Compliance teams), the Director fosters a culture of continuous improvement and proactive risk management.
This role has technical subject matter expertise and management duties. They may be alerted for unplanned escalation or backup support at any time. They are expected to respond to alerts as appropriate.
Occasional travel to the Providence, RI campus is required for on-site leadership meetings or incident management.
Qualifications:
Education and Experience<ul><li>
Bachelor's Degree required.</li><li>
10+ years of combined IT and IT security experience, with at least 3 years in a significant leadership role.</li><li>
Proven management experience providing strategic oversight and mentorship to multidisciplinary technical teams, ensuring alignment between departmental goals and high-performance execution.</li><li>
Experience with security operations, incident response, and security engineering.</li><li>
Knowledge of privacy regulations (e.g., GDPR, CCPA, FERPA, HIPAA) preferred.</li><li>
Industry certifications such as CISSP, CISM, CISA, or equivalent preferred.</li><li>
Experience with vulnerability management, and security architecture.</li><li>
Experience with cloud security (e.g. Azure, GCP, and AWS) preferred.</li></ul>
Job Competencies<ul><li>
Strong leadership and team-building skills.</li><li>
Ability to manage multiple priorities in a dynamic environment.</li><li>
Excellent verbal and written communication skills.</li><li>
Strong analytical and problem-solving abilities.</li><li>
Knowledge of compliance frameworks and regulatory requirements (e.g. NIST 800-171 and PCI DSS).</li><li>
Ability to work effectively with diverse stakeholders across the institution</li></ul>
A criminal background check and education verification is required. In addition to completing a Criminal Justice Information Services (CJIS).
Benefits of Working at Brown:
Information on the Benefits of Working at Brown can be found here.
Recruiting Start Date:
2026-04-07
Job Posting Title:
Director, Information Security
Department:
Office of Information Technology
Grade:
Grade 13
Worker Type:
Employee
Worker Sub-Type:
Regular
Time Type:
Full time
Scheduled Weekly Hours:
37.5
Position Work Location:
Remote 
Submission Guidelines:
Please note that in order to be considered an applicant for any staff position at Brown University you must submit an application form for each position for which you believe you are qualified. Applications are not kept on file for future positions. Please include a cover letter and resume with each position application.
This position is not eligible for visa sponsorship.
Still Have Questions?
If you have any questions you may contact employment@brown.edu.
Brown is an E-Verify Employer.
EEO Statement:
Brown University provides equal opportunity and prohibits discrimination, harassment and retaliation based upon a person&rsquo;s race, color, religion, sex, age, national or ethnic origin, disability, veteran status, sexual orientation, gender identity, gender expression, or any other characteristic protected under applicable law, in the administration of its policies, programs, and activities. The University recognizes and rewards individuals on the basis of qualifications and performance. The University maintains certain affirmative action programs in compliance with applicable law.</div>

Director, Information Security

ConvenientMD

<div><div>At ConvenientMD, we're on a mission to make good health more convenient for all &ndash; working to improve how patients and providers experience healthcare in New England. To support this belief, we're building a team of dedicated professionals who genuinely care about improving lives, are passionate about work that can make a difference, and are driven to learn from one another.</div><h3 class="jobSectionHeader">
The Opportunity</h3>

The Director of Technology Security &amp; Governance will play a critical leadership role in safeguarding the organization's technology environment while establishing a disciplined, enterprise-wide approach to technology governance. This leader will be responsible for advancing information security and privacy programs that protect patient and organizational data, while also designing and operating a structured intake, prioritization, and oversight process for technology initiatives.

Operating within a highly regulated healthcare environment, this role ensures the confidentiality, integrity, and availability of systems and data, while enabling thoughtful, transparent decision-making around technology investments. The Director will partner closely with IT, Compliance, Clinical, Revenue Cycle, Finance, Operations, and Executive leadership to embed security, privacy, and governance into both strategic planning and day-to-day operations.

This is an opportunity to balance strategic leadership with hands-on execution, building scalable frameworks that support growth, mitigate risk, and drive operational excellence across the enterprise.

This role is not remote. This position is based onsite at ConvenientMD headquarters in Portsmouth, NH.
<h3 class="jobSectionHeader">
Your Impact
</h3><ul><li>Information Security Leadership
<ul><li>Lead and manage the organization's technology security function, ensuring robust protection of systems, infrastructure, and sensitive data</li>
<li>Develop, implement, and continuously evolve comprehensive cybersecurity strategies, policies, and procedures</li>
<li>Oversee security risk management, including risk assessments, vulnerability management, remediation planning, and risk acceptance processes</li>
<li>Monitor emerging threats and lead incident response efforts, ensuring rapid, coordinated mitigation and recovery</li>
<li>Ensure appropriate safeguards are in place across clinical, financial, and operational systems, including EHRs, cloud platforms, and third-party technologies</li>
<li>Provide clear, executive-level reporting on security posture, risks, and mitigation strategies</li>
</ul></li><li>Privacy &amp; Regulatory Compliance
<ul><li>Partner with Compliance and Legal to support adherence to HIPAA, HITECH, and other applicable privacy regulations</li>
<li>Contribute to the development and delivery of privacy policies, training programs, and organizational awareness initiatives</li>
<li>Support audits, regulatory inquiries, and security and privacy assessments</li>
<li>Champion a culture of security awareness and best practices across the organization</li>
</ul></li><li>Technology Governance &amp; Prioritization
<ul><li>Design, implement, and manage an enterprise-wide technology governance framework, including project intake, evaluation, and prioritization</li>
<li>Establish clear criteria for assessing technology initiatives, including security, privacy, risk, regulatory impact, resource capacity, and strategic alignment</li>
<li>Partner with executive leadership to drive transparent portfolio management and prioritization decisions</li>
<li>Ensure security and privacy considerations are embedded early in project planning and solution design</li>
</ul></li><li>Operational Excellence &amp; Continuous Improvement
<ul><li>Collaborate cross-functionally to deliver secure, scalable, and effective technology solutions</li>
<li>Analyze support volume and trends to identify opportunities for efficiency and reduction through technology</li>
<li>Establish and track KPIs, driving accountability, continuous improvement, and program maturity</li>
</ul></li><li>Strategic Partnership &amp; Communication
<ul><li>Act as a trusted advisor to executives, clinicians, and business leaders on security, privacy, and governance matters</li>
<li>Translate complex technical and regulatory concepts into clear, actionable, business-focused insights</li>
</ul></li></ul><h3 class="jobSectionHeader">Who You Are</h3>
<ul><li>Experience: Minimum of 4 years of experience in healthcare technology and 4 years in IT security and governance</li>
<li>Healthcare technology leader: Proven track record of building and managing high-performing security and governance programs within a healthcare environment</li>
<li>Cybersecurity expert: Deep understanding of cybersecurity frameworks, threat management, incident response, and regulatory requirements in healthcare</li>
<li>Strategic and hands-on operator: Ability to balance long-term strategy with day-to-day execution in a complex, regulated environment</li>
<li>Clear and influential communicator: Skilled at translating complex technical concepts into business-focused insights for diverse stakeholders</li>
<li>Process and governance builder: Experienced in developing policies, documentation, and structured frameworks that drive consistency, accountability, and scalability</li>
<li>Collaborative partner: Trusted relationship-builder who works effectively across IT, Compliance, Clinical, and executive teams</li>
</ul><div><h4 class="jobSectionHeader">Why You'll Love Working With Us</h4>
<ul><li>Collaborative team environment that encourages professional growth</li>
<li>Urgent care services at no cost to our team members and their families</li>
<li>Extensive benefit offerings including health, dental, and vision coverage, company paid short-term disability, and optional pet insurance</li>
<li>401k match after one year of service</li>
<li>Access to our primary care (depending on location)</li>
<li>Educational Alliance with Purdue University Global and reduced tuition rates for team members and their families</li>
<li>Employer rewards and access to discounts offered on services and products such as hotels, travel, entertainment, restaurants, and more</li>
</ul>
There's a job and then there's purposeful, transformative work. Our aim is to create a workplace where you can learn, grow, and continuously refine your skills. Applicants rarely meet every single job requirement, and we appreciate that many skills and backgrounds can make people successful in this role. We are committed to creating a strong sense of belonging for all team members, and our process is designed to prevent discrimination against applicants regardless of gender identity, sexual orientation, religion, ethnicity, age, disability status, or any other aspect which makes you unique. If you're looking for a great next step, and want to feel good about what you do, we'd love to hear from you.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.</div></div>

Director of Technology Security & Governance

C.H. Robinson

<div>C.H Robinson is seeking a Director of Security Operations who will lead the teams and capabilities responsible for monitoring, detecting, responding to, and recovering from cybersecurity threats across the enterprise. This role sets the security operations strategy and operating model, ensures 24x7 operational readiness, and drives measurable improvements across incident response, threat detection engineering, security monitoring, vulnerability response coordination, and security automation. The Director partners with technology and business leaders to reduce risk, strengthen resilience, and ensure consistent execution through governance, metrics, and continuous improvement.
DUTIES AND RESPONSIBILITIES
The duties and responsibilities of this position consist of, but are not limited to, the following:<ul><li>
Establish and execute the enterprise security operations strategy, including the security monitoring and incident response operating model, service objectives, escalation paths, and continuous improvement roadmap</li><li>
Direct day-to-day Security Operations Center (SOC) functions, ensuring effective triage, investigation, containment, eradication, and recovery for security events and incidents</li><li>
Lead and mature the incident response program, including playbooks, tabletop exercises, post-incident reviews, and reporting to executive leadership; coordinate with Legal, Privacy, HR, Communications, and business stakeholders as needed</li><li>
Own security detection strategy and coverage, partnering with engineering teams to enhance logging, SIEM content, alert fidelity, use-case development, and threat hunting capabilities</li><li>
Define and manage key performance indicators (KPIs) and service level objectives (SLOs) for security operations (e.g., MTTD/MTTR, containment time, alert quality), and provide dashboards and executive-ready reporting</li><li>
Oversee security tooling and operational capabilities (e.g., SIEM, SOAR, EDR, case management), including vendor management, budget planning, lifecycle management, and operational resiliency</li><li>
Provide leadership for operational vulnerability response by partnering with IT and application teams to prioritize remediation, track risk acceptance, and validate closure of critical findings</li><li>
Build and maintain strong partnerships across the enterprise to embed security operations requirements into platforms and processes; serve as an escalation point for high-impact events and customer/security assurance needs</li><li>
Develop, mentor, and retain a high-performing security operations organization, including hiring strategy, succession planning, performance management, and an inclusive culture of accountability and learning</li></ul>
Required Qualifications:<ul><li>
7+ years of progressive experience in cybersecurity, including security operations, incident response, and security monitoring</li><li>
5+ years of people leadership experience, including managing senior employees and leading cross-functional, geographically distributed teams</li><li>
Demonstrated ability to lead executive-level communications during major incidents, including clear decision framing, risk articulation, and stakeholder coordination</li><li>
Bachelor&rsquo;s degree from an accredited college or university</li><li>
Ability to support a flexible work schedule and availability during major incidents, or as needed; ability to travel up to 10% (domestically and internationally)</li></ul>
Preferred Qualifications:<ul><li>
Professional security certification such as CISSP, CISM, GIAC (e.g., GCIH/GCIA/GCFA), or equivalent</li><li>
Strong knowledge of security operations frameworks and practices (e.g., NIST CSF, NIST 800-61, MITRE ATT&amp;CK) and experience translating them into operational processes</li><li>
Experience designing and maturing SOC capabilities, including detection engineering, threat hunting, automation (SOAR), and case management practices</li><li>
Proven ability to establish metrics, service levels, and governance to improve operational performance and reduce risk in a complex, fast-paced environment</li><li>
Strong technical understanding of modern security controls and platforms (e.g., SIEM, EDR, SOAR, network security, cloud security logging) sufficient to guide strategy and investment decisions</li><li>
Demonstrated experience influencing senior leaders, leading through ambiguity, and partnering across technology, risk, and business teams to drive security outcomes</li><li>
Experience managing budgets and vendors, building multi-year roadmaps, and delivering measurable outcomes through program and portfolio management</li><li>
Proficient in Microsoft Office Suite of programs and comfortable communicating operational risk and performance through written narratives and data-driven presentations</li><li>
Values a diverse and inclusive work environment</li></ul>
We will review applications for this role on an ongoing basis and encourage all interested candidates to apply at their earliest convenience.
Compensation Range
$171,000.00 - $297,900.00
The base pay range displayed on the job posting reflects the minimum and maximum base pay for this specific location. Your individual base pay within this range is determined by job-related skills, experience, and relevant education or training. Compensation details listed in this posting reflect the base pay only and do not include additional variable compensation.
Questioning if you meet the mark? Studies have shown that some individuals may be less likely to apply unless they match the job description exactly. Here at C.H. Robinson, we&rsquo;re building an inclusive workplace where all employees feel they belong. If this position excites you, we welcome you to apply whether you check all the preferred qualifications or just a few. You may just be our next great fit!
Equal Opportunity
C.H. Robinson is proud to be an Equal Opportunity Employer. We are committed to a workplace and performance culture that reflects the strengths of our worldwide marketplace. We value unique experiences and diverse backgrounds of our people within our company, our business relationships, and our communities. We&rsquo;re committed to providing an inclusive environment, free from harassment and discrimination, where all employees feel welcomed, valued and respected.
EOE\Disabled\Veteran
Benefits
Your Health, Wealth and Self
Your total wellbeing is the foundation of our business, and our benefits support your financial, family and personal goals. We provide the top-tier benefits that matter to you most, including:
<ul><li>Three medical plans which include</li><li><ul><li>
Prescription drug coverage</li><li>
Enhanced Fertility benefits</li></ul></li><li>
Flexible Spending Accounts
</li><li>Health Savings Account (including employer contribution)</li><li>
Dental and Vision</li><li>
Basic and Supplemental Life Insurance</li><li>
Short-Term and Long-Term Disability
</li><li>Paid observed holidays
</li><li>2 paid floating holidays for U.S. hourly employees</li><li>
Flexible Time Off (FTO) offered to U.S. salaried employees &mdash; no accruals and no caps. Paid Time Off (PTO) offered to all other employees in the U.S. and Canada</li><li>
Paid parental leave</li><li>
Paid time off to volunteer in your community</li><li>
Charitable Giving Match Program</li><li>
401(k) with 6% company matching</li><li>
Employee Stock Purchase Plan</li><li>
Plus a broad range of career development, networking, and team-building opportunities</li></ul>
Learn more about our benefit offerings on our BENEFITS &amp; WELLBEING page</div>

Director Security Operations

<div>Director, Cybersecurity Regulatory Engagement (1LOD)

 At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We&rsquo;re seeking a future team member for the role of Director, Cybersecurity Governance, Risk and Controls Regulatory Engagement Lead to join our Cybersecurity team. This role can is in NYC, NY.

Role Summary:

The Director, Cybersecurity Regulatory Engagement (1LOD) is an individual contributor role within Cybersecurity Governance, Risk &amp; Controls (CGRC). Consistent with the First Line of Defense (1LOD) mandate, this role manages and executes cybersecurity regulatory engagement activities contributing to effective risk and control outcomes.

The role supports and contributes to cybersecurity regulatory engagements, including exams, inquiries, remediation activities, new regulatory guidance and regulatory requests, by coordinating inputs, supporting control alignment, and driving disciplined execution. This position reports the Director of Cyber regulatory engagement and plays a critical role in translating regulatory expectations into clear, repeatable, and well-controlled 1LOD execution.

This position requires deep regulatory judgment, and the ability to work directly with cybersecurity leadership, Engineering Controls, and risk partners in a highly regulated environment.

Primary Responsibilities &ndash; 1LOD Alignment

Regulatory Engagement Execution:
<ul>
<li>Execute end‑to‑end cybersecurity regulatory engagements, including regulatory exams, supervisory meetings, remediation activities, and requests for information (RFIs).</li>
<li>Coordinate globally with cybersecurity process owners, control owners, and subject matter experts, to deliver accurate, consistent, and regulator‑ready responses &ndash; additionally, partner closely with Engineering Controls, Technology Risk (2LOD), Internal Audit (3LOD), and other cross‑functional stakeholders to ensure coordinated and well‑governed regulatory execution.</li>
<li>Reinforce a risk-aware culture through disciplined 1LOD execution.</li>
<li>Drive the development of high‑quality regulatory submissions by coordinating input across control owners, subject matter experts, and technical teams.</li>
<li>Reinforce direction and expectations for clear, accurate, and consistent cybersecurity regulatory responses.</li>
<li>Review, challenge, and approve key regulatory responses to ensure alignment with the firm&rsquo;s cybersecurity posture and risk appetite.</li>
<li>Contribute to a centralized regulatory response repository, leveraging AI‑enabled capabilities to improve response quality, consistency, and reuse.</li>
<li>Prepare executive‑level briefings, materials, and talking points for senior management. Including preparing materials for senior management committees and boards.</li>
<li>Partner with Engineering Controls, Risk, Compliance, Legal, and Internal Audit leadership throughout regulatory engagements</li>
<li>Provide status updates and analysis to cybersecurity leadership.</li>
<li>Provide leadership, coaching, and oversight to supporting team members.</li>
<li>Maintain accurate regulatory engagement tracking, documentation, and artifacts in accordance with CGRC governance standards.</li>
<li>Contribute to continuous improvement of regulatory engagement playbooks, job aids, and execution routines.</li>
<li>Support reporting and metrics to provide transparency into regulatory risk, themes, and engagement status.</li>
<li>Support the design, implementation, and assessment of controls addressing regulatory expectations.</li>
<li>Contribute to 1LOD risk and control taxonomies.</li>
<li>Identify control gaps, thematic issues, and systemic risks surfaced through regulatory engagements and partner with control owners to drive remediation.</li> 
<li>
</li></ul>Regulatory Response Management

Stakeholder Management &amp; Communication

Team Leadership, Process Improvement &amp; Reporting

Risk &amp; Control Alignment:

Required Qualifications:
<ul>
<li>12+ years of experience in cybersecurity, technology risk, governance, audit, controls or related technology disciplines.</li>
<li>Extensive experience in regulatory engagements, risk management, audit, or compliance within a large, complex, and highly regulated organization.</li>
<li>Proven track record leading regulatory exams, supervisory interactions, or other types of regulatory engagements.</li>
<li>Experience operating in a First Line of Defense (1LOD) role.</li>
<li>Demonstrated ability to operate effectively at senior leadership and executive levels.</li>
<li>Strong understanding of cybersecurity risk management, control frameworks, and regulatory expectations applicable to financial institutions.</li>
<li>Ability to synthesize complex technical and risk topics into clear, defensible regulatory narratives.</li>
<li>Exceptional written and verbal communication skills, with experience engaging regulators and senior executives.</li>
<li>Strong judgment, executive presence, and the ability to influence outcomes without direct authority.</li>
<li>Ability to manage multiple high‑stakes regulatory engagements concurrently under pressure.</li>
</ul>
At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn
 Here&rsquo;s a few of our recent awards:
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul> 
 
Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. 
 
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $116,000 and $246,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs. 
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</div>

Director, Cybersecurity Regulatory Engagement (1LOD)

Search 7103+ Cybersecurity director jobs near you this April. New roles added regularly across leading industries. Apply today.