Director of Cybersecurity

At Macmillan Learning, we're committed to driving innovation that transforms education. We seek team members who thrive on pushing boundaries, envisioning future possibilities, and building solutions that make a lasting impact. Whether you're a Pioneer shaping bold new ideas, a Builder turning possibilities into reality, or a Stabilizer optimizing for success, you'll play a vital role in advancing our mission. If you're excited by the prospect of testing new technologies, implementing transformative strategies, and thriving in a fast-paced, innovative environment, we’d love to hear from you!

The Director of Cybersecurity serves as the strategic and operational leader responsible for defining and executing a comprehensive cybersecurity vision for Macmillan Learning. This role ensures the protection of enterprise systems, data, and digital infrastructure by overseeing the development and enforcement of security policies, practices, and technologies. Acting as the organization’s foremost authority on cybersecurity, the Director works across departments to integrate security into business operations, reduce risk, and align security initiatives with corporate and regulatory priorities. The role also drives a culture of proactive security awareness, resilience, and continuous improvement throughout the organization.

Studies have shown that women and people of color are less likely to apply for jobs unless they believe they can perform every job description task. We strongly encourage and welcome applications from individuals of all backgrounds, including women and people of color, to apply for this role. We're eager to meet people that believe in our mission and can contribute to our team in a variety of ways - not just candidates who check all the boxes. We believe in fostering a diverse and inclusive workplace, and we recognize that unique perspectives and experiences contribute to the strength of our team. If you are interested in applying, we encourage you to think broadly about your background and skill set for the role. We value your potential, and we are committed to providing a supportive and inclusive environment where all individuals can thrive and contribute their best.

Responsibilities include, but are not limited to:

• Develop and execute a comprehensive cybersecurity strategy aligned with Macmillan Learning's mission and business objectives.
• Establish and enforce security policies, standards, and procedures to ensure consistent protection across the organization.
•  Collaborate with executive leadership to integrate security considerations into business planning and decision-making processes.
•  Provide regular reports on cybersecurity posture, risks, and initiatives to the CIO and other key stakeholders.
• Identify, assess, and prioritize cybersecurity risks across the enterprise.
•  Ensure compliance with applicable laws, regulations, and standards (e.g., GDPR, CCPA, NIST).
•  Develop and maintain a risk management framework to address emerging and ongoing threats.
•  Liaise with auditors and regulatory bodies during security evaluations and assessments.
•  Support RFP and customer inquiries on Certification and Compliance, dissemination of information on our security practices and posture.
•  Support Crisis Management team and customer communications in the event of an incident.
• Manage the Security Operations Center (SOC) to ensure effective real-time threat analysis and response.
•  Conduct regular security assessments and audits to identify vulnerabilities and implement mitigation strategies.
• Coordinate incident response efforts, ensuring timely resolution and communication with relevant parties.

Required Qualifications:

• Minimum of 10 years of progressive experience in information security, including at least 5 years in a cybersecurity leadership role.
•  Proven hands-on experience with core security technologies such as vulnerability scanners, intrusion detection and prevention systems (IDS/IPS), web application firewalls (WAF), and botnet and DDoS protection solutions.
•  Strong expertise in host and network security standards, configurations, and best practices across hybrid cloud and on-prem environments.
•  Deep knowledge of industry-standard cybersecurity frameworks and regulatory compliance models, including SOC 2, NIST, ISO/IEC 27001, and CIS Controls.
•  Demonstrated ability to manage and deliver complex security initiatives using DevSecOps and agile methodologies.
•  Proficiency in security monitoring, log aggregation, and observability tools such as Splunk, Sumo Logic, Datadog, and Grafana.
•  Exceptional communication skills with the ability to convey complex technical information clearly and effectively to technical and non-technical audiences, bo