Director of Security

Location: Atlanta, GA

Reports To: CIO

Job Summary: We are seeking a seasoned and highly skilled Director of Security to lead our organization's security strategy and operations. The Director of Security will be responsible for developing and implementing comprehensive security policies, procedures, and technologies to protect the organization’s assets, data, and infrastructure. This role requires a dynamic leader with a strong background in security management, incident response, risk assessment, and regulatory compliance.

Strategic Security Leadership:

• Develop and implement a strategic security program to protect the organization's data, infrastructure, and assets.
• Ensure alignment of security initiatives with business objectives.
• Establish security goals, objectives, and metrics to measure effectiveness.
• Policy and Procedure Development:
• Create, review, and update security policies, standards, guidelines, and procedures.
• Ensure policies are compliant with industry standards and regulatory requirements.

Risk Management and Compliance:

• Conduct regular risk assessments and vulnerability analyses.
• Develop risk mitigation strategies and ensure compliance with relevant laws and regulations (e.g., GDPR, HIPAA, PCI-DSS).

Incident Response and Management:

• Lead the incident response team in the detection, response, and remediation of security incidents.
• Develop and maintain an incident response plan, including disaster recovery and business continuity plans.

Security Operations:

• Oversee the management and monitoring of security systems and infrastructure.
• Ensure robust endpoint protection, network security, and threat intelligence capabilities.
• Manage security audits, penetration tests, and assessments.

Team Leadership and Development:

• Lead, mentor, and develop the security team, fostering a culture of continuous improvement.
• Ensure the team stays current with emerging security trends and technologies.

Stakeholder Collaboration:

• Collaborate with IT, legal, compliance, and business units to integrate security into all business processes.
• Serve as the primary point of contact for all security-related matters within the organization.

Vendor and Technology Management:

• Evaluate, select, and manage security vendors and service providers.
• Oversee the implementation and maintenance of security technologies.

Qualifications:

• Education: Bachelor’s degree in Information Security, Computer Science, or a related field. A Master’s degree is preferred.
• Experience: Minimum of 10 years of experience in security management, with at least 5 years in a leadership role.

Certifications: Preferred certifications include CISSP, CISM, CISA, CEH, GIAC, or similar.

Skills:

• Strong knowledge of security frameworks (e.g., NIST, ISO 27001).
• Proficient in risk assessment and management, incident response, and regulatory compliance.
• Excellent leadership, communication, and interpersonal skills.
• Ability to work under pressure and handle multiple priorities.

Working Conditions:

• Occasional travel may be required for on-site security assessments and incident response.

Equal Opportunity Employer: Our organization is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.