Director, Cybesecurity - Operations

Director, Cybersecurity – Operations - Denver, CO (Hybrid)

Are you passionate about cybersecurity?  Would you like to lead a team and in a strong global cybersecurity team?  Are you interested in joining a globally diverse financial services organization?  Then it’s time to join Western Union as a Director of Cybersecurity. 

Western Union powers your pursuit. 

As the Director of Cybersecurity Operations at Western Union, you will develop and lead a comprehensive cybersecurity operations program designed to protect our organization's digital assets and infrastructure on a global scale. You will be responsible for leading a global and diverse team of cybersecurity professionals distributed across multiple regions, including experts in Security Operations, Incident Response, Cyber Threat Intelligence, Cyber Analytics, Attack Surface Management and Offensive Operations. Your leadership will be instrumental in ensuring the security and resilience of our organization's systems against evolving cyber threats across the globe. The Director of Cybersecurity Operations will play a pivotal role in ensuring effective cybersecurity operations, recognizing the substantial and material impact that security events can have on an organization's viability and overall success and continuously defending against these threats.

Applicants must be currently authorized to work in the United States on a full-time basis. Western Union will not sponsor applicants for work visas for this position.

Role Responsibilities

• Strategic Leadership: Deliver thought leadership and industry expertise for all capabilities within the Cybersecurity Operations pillar.
• Team Management: Lead, expand, and mentor a global team of cybersecurity operations professionals, including specialists in cybersecurity capabilities such as Cybersecurity Event Monitoring, Detection Engineering, Attack Surface Management, Offensive Operations, Cyber Threat Intelligence, Incident Response, Insider Threat, Threat Hunting and more.
• Stakeholder Engagement:  Collaborate and partner with Technology, Cybersecurity Architecture and Engineering teams, and external partners to monitor and maintain existing security products while assisting in delivering new or optimizing existing security controls.
• Incident Response: Ensure comprehensive incident management protocols are in place to response swiftly to cybersecurity incidents. Lead and coordinate incident response efforts, coordinating the activities of the incident response team, containing threats, and ensuring that the organization recovers quickly and effectively.
• Innovation and Improvement: Stay abreast of industry trends and advancements in cybersecurity technology as well as emerging threats. Adapt and refine daily operations, updating security processes and implementing new defensive measures to improve the efficiency and effectiveness of day-to-day cybersecurity operations.
• Extensive knowledge of cybersecurity frameworks and building cybersecurity operations around a threat informed defensive approach.
• Cyber Analytics: Skilled in using data analytics within SIEM platforms to identify potential threats, enhancing predictive and proactive security measures while incorporating SOAR automation into response processes.
• Advanced Threat Detection: Ability to implement advanced threat detection mechanisms to quickly identify and mitigate sophisticated cyber-attacks.
• Cybersecurity Operations: Experience with implementing and operating security tools such as Network and Application Security (IDS/IPS/WAF/CASB/Proxy), Endpoint Security (AV/EDR/DLP), Email Security (SEG), Vulnerability Management (VM Scanners/BAS), Cloud Security (CSPM/CNAPP), SIEM and SOAR tools.
• Cyber Threat Intelligence: Familiarity with Cyber Threat Intelligence lifecycle. Strong understanding of MITRE ATT&ACK TTPs and incorporating cyber threat intelligence into detection engineering, threat hunting, and incident handling and response processes.
• Incident Response: Knowledgeable of Digital Forensics and Incident Response (DFIR) processes and tools focused on effective investigation and containment of threats, determining root cause and conducting postmortem activities to improve our security posture.

Role Requirements 

• Bachelor’s degree in Computer Science, Cybersecurity, or similar field preferred. 
• 10+ years of proven experience in cybersecurity roles, including 5 years of leadership ideally within a global enterprise with demonstrated increasing responsibility.
• Strong leadership skills with a track record of managing cross-functional teams in a multinational environment.
• Excellent communication and interpersonal skills.
• Strategic thinker with an