Associate Director, Information Security

Associate Director of Information Security

We are seeking a highly motivated, hands-on Information Security leader with strong, broad security expertise and proven experience in Data Loss Prevention (DLP) and Data Security Posture Management (DSPM), to join our team as an Associate Director of Information Security. This is a senior technical role that combines strategic leadership with technical execution to protect sensitive data across complex environments.  In addition, this role will also oversee the Information Security Third-Party Risk Management (TPRM) program, ensuring robust security practices across internal and external environments. The Associate Director will lead a small team of security professionals and will report to the Director of Information Security. 

Essential Duties and Responsibilities

• Lead, mentor, and manage a team of security analysts, fostering a culture of continuous improvement, accountability, and professional growth.

• Lead the strategy, implementation, and continuous improvement of enterprise DLP and DSPM programs across on-prem, cloud and SaaS environments. 

• Provide management oversight of the TPRM program, ensuring that all vendor and partner relationships meet security standards. 

• Develop and enforce security policies, standards, and best practices aligned with regulatory and contractual requirements. 

• Collaborate with IT, Legal, and Compliance teams to ensure risk mitigation and regulatory compliance. 

• Respond to and manage security incidents, including forensic investigations and root cause analysis. 

• Collaborate with architecture teams to conduct security architecture reviews for new applications, platforms, and infrastructure deployments, ensuring security is built-in by design.

Stay current on emerging threats, data protection technologies and regulatory changes

Basic Qualifications, Minimum Education & Experience Requirements

• Bachelor’s degree in computer science, Information Technology, or another related field 
• Minimum of 8 years of experience in Information Security, with at least 3 years proven experience in a security leadership or management role.
• Proven track record in DLP program leadership and DLP Solutions (e.g. MS Purview, Proofpoint)
• Proven hands-on experience with Data Security Posture Management (DSPM) Platforms in a hybrid environment
• Strong general security knowledge across network, cloud, and application security.
• Strong general knowledge in Vulnerability Management, including scanning, prioritization, and remediation processes.
• Working knowledge of SIEM platforms for monitoring and threat detection.
• Experience building or managing a TPRM or Vendor Security program.
• Solid knowledge of data protection regulations (GDPR, CCPA) and risk frameworks (NIST CSF, ISO27001, DAMA-DMBOK)
• CISSP, CISM or equivalent certifications

Preferred Qualifications/Personal Attributes

• Excellent oral and written communication and presentation skills 

• Quality-focused individual with strong organizational skills

• Must have necessary interpersonal skills to interface effectively with all levels in the organization

• High integrity with a strong all-round set of business and technical skills

• Ability to influence change across multiple groups, and levels 

• Ability to work in a face-paced environment and follow processes and procedures with accuracy and attention to detail

• Problem solving and analytical abilities including the ability to critically evaluate information gathered from multiple sources, reconcile conflicts, decompose high-level information into details and apply sound business knowledge.

• Ability to multi-task and handle on a proactive basis, changing priorities in a fast-paced environment to maximize time-management and efficiencies.

• A strong curiosity, in