Security Program Director

We are looking for an experienced Security Program Director to lead and oversee the organization's global security program across multiple business units and geographies.

This strategic leadership role is responsible for developing, implementing, and continuously improving an integrated security framework that protects critical business assets while ensuring compliance with international regulatory requirements.

The Security Program Director will serve as a key advisor to executive leadership, translating security risks, compliance obligations, and program performance into clear business insights for decision-making at board level.

Key Responsibilities

Lead the enterprise-wide security program across multiple regions and jurisdictions.

Define and maintain security governance frameworks, policies, and strategic roadmaps.

Present security strategy, risk assessments, program performance, and recommendations to executive and board stakeholders.

Direct security compliance initiatives and audit programs, ensuring alignment with relevant standards and certifications.

Oversee operational IT security capabilities, inceluding infrastructure security, endpoint protection, identity and access management, and security monitoring.

Lead incident response and crisis management activities during security events and compliance incidents.

Establish security KPIs and metrics to measure program effectiveness and communicate outcomes to leadership.

Drive security integration within digital transformation initiatives and evolving technology environments.

Coordinate with legal, compliance, operations, and business leaders to balance security requirements with business priorities.

Manage security risks across international regulatory environments and multiple business functions.

Required Experience

15+ years of experience in cybersecurity and information security roles.

7–10+ years in leadership or director-level positions.

Proven experience managing enterprise-wide security programs across multiple business units and geographies.

International security program management experience across diverse regulatory environments (including GDPR, DORA, etc.).

Experience presenting security strategy, risk assessments, and program results to C-level executives, boards, and external auditors.

Hands-on leadership of major incident response and crisis management initiatives.

Strong background in operational IT security oversight.

Security compliance and audit program leadership experience, including maintaining recognized certifications.

Experience supporting digital transformation initiatives from a security perspective.

Required Technical Skills

Cybersecurity frameworks and standards: NIST CSF, ISO 27001/27002, CIS Controls, COBIT.

Security technologies including SIEM, EDR, vulnerability management, IAM, and DLP.

Network and infrastructure security principles, including firewalls, IDS/IPS, VPNs, and Zero Trust architectures.

Application security and secure SDLC practices.

Data protection, encryption, data classification, and privacy-by-design principles.

Security KPI development and reporting.

Threat intelligence, threat modeling, risk assessment, and vulnerability management.

Nice to Have

Vendor and third-party risk management.

Supply chain security expertise.

Cloud security architecture experience within AWS, Azure, and hybrid environments.

Interested in learning more? We'd love to hear from you. Reach out and let's schedule a conversation to discuss the opportunity.