Senior Director, Cybersecurity & Enterprise Infrastructure

Join Rimkus and unlock your potential with endless opportunities for growth, learning, and making a difference!

Rimkus is a worldwide leader in Engineering and Technical Consulting. Rimkus experts specialize in building envelope, engineering, forensic consulting, dispute resolution, construction management services, and solutions built for the environment.

NOW IS THE TIME to join this growing and stable company!

Position Summary

The Senior Director, Cybersecurity & Enterprise Infrastructure is the accountable leader for the security, resilience, and technical foundation of Rimkus's technology estate. Reporting to the Chief Transformation Officer, this leader owns enterprise cybersecurity, cloud and hybrid infrastructure, endpoint and identity platforms, the enterprise data platform, the technology integration of acquired businesses, and the compliance and audit program that evidences all of it.

This is a leader-of-leaders role. It directs a multidisciplinary organization of infrastructure engineers, data engineers, systems and security staff, and the IT systems director function — setting architecture and standards, building bench strength, and converting security findings into completed, evidenced remediation.

Rimkus operates in a client environment where confidentiality, privileged information, and defensible data handling are core to the business. As a private-equity-backed, acquisitive professional services firm, the company is subject to sponsor-directed security assessments, client due diligence, and formal audit expectations — while simultaneously acquiring and integrating businesses on a recurring basis. Cybersecurity is therefore not a subordinate function of this role — it is its center of gravity, and every acquisition either strengthens or dilutes it.

Because the position reports into the Transformation organization, it carries an explicit mandate to standardize, consolidate, and modernize rather than merely operate.

Scope & Organizational Context

• Security ownership: This role is the company's accountable cybersecurity leader — including security strategy, security operations, incident response, and the formal compliance and audit program. It also owns the technology compliance control library and evidence readiness.

• Technical breadth: Microsoft Entra ID and M365 E5 identity estate, Azure and hybrid infrastructure, network and remote access, endpoint and device management, backup/DR, the enterprise data and analytics platform, and enterprise applications infrastructure.

• Organizational mandate: Rebuild depth and continuity following the departure of long-tenured technical staff. A significant portion of the first year is eliminating key-person dependency through documentation, cross-training, hiring, and automation — so that no critical system depends on a single individual's undocumented knowledge.

• Transformation mandate: Reporting into the Transformation organization, this role is expected to consolidate and standardize a technology estate that has grown through acquisition — retiring redundant platforms, unifying identity and endpoint management, and establishing a repeatable integration playbook rather than treating each deal as a one-off project.

• Inorganic growth: Rimkus grows through acquisition. This role owns the technology and security workstream across the full deal lifecycle — pre-LOI and confirmatory diligence, Day 1 readiness, post-close integration, and platform rationalization — and is accountable for ensuring acquired environments are brought up to Rimkus control standards on a defined timeline.

• Stakeholders: Executive leadership, the Transformation organization, Corporate Development, the private-equity sponsor's technology operating team, Legal and Risk, Compliance, Finance, HR, business-line and acquired-entity leadership, clients responding to security due diligence, and external assessment, audit, and managed-service partners.

Key Responsibilities

Cybersecurity Strategy & Leadership

• Own enterprise cybersecurity strategy, target-state architecture, and a funded multi-year roadmap aligned to business risk and growth.

• Serve as the accountable security leader: maintain the security policy set, the enterprise risk register with quantified business impact, and documented risk-acceptance decisions.

• Establish and chair a security governance forum; report posture, risk trend, and remediation progress to executive leadership, the Board, and the private-equity sponsor on a defined cadence.

• Lead and coordinate independent security assessments, penetration tests, and sponsor-directed reviews; own the remediation plan,