Director Information Security

Overview

The Director of Information Security is tasked with leading and continuously developing the global information security operations at Dye & Durham Corporation. This role safeguards corporate systems, employee productivity tools, customer products, and technology assets worldwide. It involves defining and executing a comprehensive security strategy to enhance cyber resilience and manage risks while ensuring scalable security controls that align with business expansion and regulatory mandates.

Key Responsibilities

• Provide leadership and set strategic direction for the organization's global info security function.
• Create and implement a robust information security strategy, operational framework, and progression roadmap.
• Manage security measures for core corporate systems including email, collaboration, and productivity platforms.
• Ensure protection for customer-facing applications and technology services.
• Establish and grow security program capabilities from the baseline, focusing on maturity and scalability.
• Identify and mitigate cybersecurity risks employing effective governance and risk management.
• Lead security operations including vulnerability management, penetration testing, threat monitoring, and ongoing security surveillance.
• Address audit findings and compliance needs by deploying compensating controls.
• Upgrade legacy IT systems securely without compromising business continuity.
• Collaborate cross-functionally with technology, infrastructure, engineering, product, legal, privacy, and risk teams to integrate security by design principles.
• Oversee preparedness and response planning for security incidents and crisis situations.
• Generate executive-level reports and dashboards detailing security status and progress.
• Recruit, mentor, and lead a high-caliber Information Security team.

Required Expertise and Qualifications

• Over 10 years in information security, cyber security, technology risk, or related technology leadership roles.
• Experience in building, evolving, or scaling security operations within growing organizations.
• Strong technical background in IT infrastructure, systems administration, networking, or network security.
• Demonstrated leadership of security operations, vulnerability assessments, penetration testing, and incident response programs.
• Deep knowledge of security frameworks such as ISO 27001, NIST, CIS Controls, SOC 2, and PCI DSS.
• Expertise in governance, risk, and compliance frameworks including audit remediation and compensating controls.
• Familiarity with cloud security, identity and access management, application security, and secure software development lifecycle practices.
• Ability to effectively communicate complex security risks and strategies to executives and non-technical audiences.
• Strong leadership skills with proven stakeholder management and team development experience.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or CCSP are highly preferred.

Benefits and Culture

Dye & Durham champions employee growth by providing both internal and external training opportunities to prepare for future challenges. They offer competitive salaries alongside benefits such as healthcare, pension plans, company discounts, wellness initiatives, and paid leave for activities like moving house or volunteering.