Director, Cybersecurity Operations

Overview:

Responsibilities:

Operational Governance & Managed Services Oversight

• Govern the performance, delivery, and continuous improvement of managed security service providers (e.g., MDR, SOC, vulnerability management).
• Define and enforce service-level agreements (SLAs), key performance indicators (KPIs), and outcome-driven metrics aligned to business risk.
• Ensure appropriate escalation, incident handling, and reporting processes are in place and operating effectively.

Threat Detection & Response (SOC / CIRT)

• Oversee enterprise threat detection, monitoring, and incident response capabilities, including SIEM, EDR, and threat intelligence integration.
• Ensure readiness and effectiveness of incident response processes, including coordination with crisis management and external partners.
• Drive maturity in detection engineering, threat hunting, and response orchestration to reduce dwell time and improve response outcomes.
• Provide executive-level reporting on threat landscape, incident trends, and response effectiveness.

Business Continuity & Disaster Recovery (BC/DR)

• Govern cybersecurity alignment with enterprise business continuity and disaster recovery planning.
• Ensure cyber incident scenarios are integrated into BC/DR plans and regularly tested through exercises.
• Coordinate with IT and business stakeholders to validate recovery capabilities and resilience objectives.

Exposure Management (Vulnerability Management & Application Security)

• Lead the enterprise exposure management program, including vulnerability identification, prioritization, and remediation governance.
• Oversee application security practices, including secure SDLC integration and application risk assessments.
• Partner with infrastructure and application owners to ensure timely remediation of identified risks.
• Drive adoption of continuous threat exposure management (CTEM) principles

Security Awareness & Human Risk Management

• Oversee the design and execution of the enterprise security awareness program, including phishing simulations and targeted training.
• Measure and report on human risk reduction metrics and program effectiveness.
• Foster a security-aware culture across the organization.

Strategy & Continuous Improvement

• Partner with cybersecurity leadership to define and execute the strategic roadmap for cybersecurity operations capabilities.
• Identify opportunities to enhance automation, AI-driven detection/response, and operational efficiency.
• Drive continuous improvement initiatives across people, process, and technology dimensions.

Stakeholder Engagement & Leadership

• Act as a key liaison between cybersecurity, IT, business units, and external partners.
• Provide regular briefings to executive leadership on operational risk, program maturity, and performance.
• Build and lead a high-performing team, including internal staff and service providers.

Qualifications:

Experience