Director, Security (Enterprise Security)

Mission

Spearhead Databricks' security initiatives by orchestrating cutting-edge programs in Enterprise Security, while helping to drive the evolution of the company's comprehensive Security Program. Leverage advanced technologies, including AI and machine learning, to safeguard Databricks' corporate environment, ensuring the resilience and trustworthiness of Databricks, which powers data, analytics, and AI for over 10,000 organizations worldwide.

Opportunity

Databricks is on a mission to empower every organization to accelerate innovation through data and AI. Behind this mission is a company operating at a global scale—thousands of employees, a hybrid workforce, and a cloud-native ecosystem that powers the Databricks Lakehouse platform. Protecting this environment means securing the digital backbone that enables innovation, trust, and execution.

As the Director of Enterprise Security, you will lead all aspects of Databricks’ corporate and enterprise security strategy. This includes securing SaaS systems, endpoints, workforce identity, and corporate data across a highly distributed, multi-cloud environment. You’ll design a security program that enables business velocity while defending Databricks from evolving cyber risks—balancing protection, productivity, and scale in a fast-moving, AI-driven environment.

Candidates must be eligible to obtain and maintain a U.S. government clearance at the Secret level or higher.

Outcomes

• Strategic Partnerships and Influence: Own, develop, and drive the Enterprise Security vision, priorities, and OKRs by building deep, cross-functional partnerships —ensuring alignment across department leadership and the company's overall mission.
  Security Architecture and Design: Own the long-term strategic roadmap for enterprise security, ensuring the architecture anticipates future business needs, technical evolution, and resource investment strategies.
• Data Security and Governance: Lead the creation of robust data protection standards and processes that prioritize customer and employee trust, ensuring sensitive corporate data is managed responsibly and securely across SaaS and internal platforms.
• SaaS and Cloud Application Security: Embed security by design into the selection, integration, and management of business-critical SaaS and cloud applications—collaborating across teams to ensure solutions meet the highest standards of customer and enterprise protection.
• Endpoint Security and Workforce Enablement: Enable a culture of innovation and productivity by delivering an endpoint security program that is user-centric, scalable, and adaptable—protecting corporate systems without compromising speed or autonomy.
• System Hardening and Configuration Standards: Establish and maintain evidence-based STIGs and security baselines for corporate and SaaS environments, driving consistent security hygiene and enabling rapid, secure adoption of new technologies.
• Identity and Access Management: Champion a unified, data-driven IAM strategy that empowers secure and frictionless access to corporate resources, supporting Databricks’ global workforce and collaboration while aligning with zero-trust principles.
• Automation and Operational Maturity: Accelerate organizational maturity by leveraging automation, data-driven insights, and proactive budget/resource planning  to optimize security processes, elevate response times, and drive measurable efficiency across the security function.
  
  

Competencies

• Visionary Strategic Leadership: Proven ability to create a clear and compelling vision for the entire Enterprise Security function , effectively decompose the long-term strategy into goals, and communicate complex topics to executive stakeholders and the board.
• Enterprise Security Expertise: Extensive experience architecting and managing security programs for global, cloud-native organizations, including identity management, endpoint security, data protection, and SaaS governance in hybrid and remote environments.
• Identity and Access Governance: Advanced knowledge of zero-trust principles and hands-on experience building and optimizing IAM strategies across multi-cloud and multi-SaaS platforms to ensure effective, user-centric access control.
• Data Protection and Privacy Leadership: Demonstrated success developing robust corporate data security programs, including encryption, data loss prevention (DLP), and secure data lifecycle management, with a strong commitment to privacy and regulatory alignment.
• Organizational Influence & Partnership: Ex