Director of IT Security

Job Title: Director of IT Security

Reports To: VP IT Infrastructure & Security

Location: Wall Township, NJ

Job Type: Monday- Friday, Full-Time

Job Summary:

The Director of IT Security will lead the development and implementation of a comprehensive cybersecurity strategy to protect the organization's information assets. This role requires a deep understanding of current cybersecurity threats, technologies, and best practices. The Director will oversee the cybersecurity team and work closely with other departments to ensure the security of the company's digital infrastructure.

Duties/Responsibilities:

• Develop and implement a robust cybersecurity strategy aligned with the organization's goals.
• Lead the cybersecurity team, providing guidance, mentorship, and performance management.
• Stay updated on the latest cybersecurity trends, threats, and technologies to ensure the organization remains protected.
• Oversee the deployment, integration, and management of security solutions including CrowdStrike, Fortinet, Qualys, Microsoft Defender and other technology solutions
• Ensure the effective use of Azure Active Directory for identity and access management.
• Implement, manage, and support OneLogin Multi-Factor Authentication (MFA) across all critical systems.
• Utilize Cloudflare for web application security, performance optimization, DNS, and Zero Trust Network Architecture
• Develop and maintain an incident response plan to address potential security breaches.
• Lead the response to security incidents, coordinating with internal and external stakeholders.
• Conduct post-incident analysis to identify root causes and implement corrective actions.
• Conduct regular risk assessments and vulnerability scans using tools like Qualys.
• Ensure compliance with relevant regulations and standards (e.g., NIST, GDPR, HIPAA).
• Develop and enforce security policies, procedures, and standards.
• Implement security awareness training programs using platforms like KnowBe4.
• Promote a culture of security awareness across the organization.
• Conduct regular phishing simulations and other training exercises to enhance employee vigilance.
• Oversee the management of email security solutions like AppRiver.
• Ensure the continuous monitoring and protection of the organization's network and endpoints.
• Evaluate and recommend new security technologies and solutions to enhance the organization's defenses.
• Other duties as assigned 

Required Skills/Abilities-Essential Functions:

• Work closely with IT, legal, and other cross-functional departments to ensure cohesive security practices.
• Communicate cybersecurity strategies and risks to senior management and the Cyber Security Steering Committee.
• Collaborate with external partners, vendors, and security communities to enhance the organization's security posture.
• Excellent leadership, communication, and interpersonal skills.
• Ability for occasional travel
• Ability to perform the essential functions of the job.
• Ability to comply with all policies and procedures established by company.

Education and Experience:

• Bachelor's degree in Computer Science, Information Technology, or a related field; Master's degree is preferred.
• Minimum of 10 years of experience in cybersecurity, with at least 7 years in a leadership role.
• Strong knowledge of cybersecurity frameworks, standards, and best practices.
• Experience with security technologies including CrowdStrike, Azure Active Directory, Cloudflare, Fortinet, Qualys, AppRiver, KnowBe4, and Microsoft Defender.
• Relevant certifications such as CISSP, CISM, or CISA are highly desirable.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification.  They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.  

STA is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants; Returning military are strongly encouraged to apply.  Applicants will receive fair and impartial consideration without regard to race, sex, color, national origin, age, disability, veteran status, genetic data, gender identity, sexual orientation, religion or other legally protected status, or any other classification protected by federal, state, or local law.

All applicants must be eligible to work in the US without restrictions.