> Markdown version of [/jobs/ext/1402786-charlotte-director-information-security](https://www.wearedevelopers.com/jobs/ext/1402786-charlotte-director-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Charlotte - Director, Information Security - **Company:** WINSTON LLC - **Location:** Mecklenburg County, NC, United States - **Experience:** Expert - **Salary:** $240,000.0 - $280,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Intrusion Detection and Prevention, Intrusion Detection Systems, Security Information and Event Management, Google Cloud, HybridCloud, Firewalls (Computer Science), Information Technology, Security Orchestration, Automation & Response - **Published:** July 23, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17678542?backUrl=%2Fcareer%2F17678542%2FCharlotte-Director-Information-Security-North-Carolina-Charlotte ## About the Role * Bachelor's degree in information technology, information security, or related field required. * 8+ years of progressive experience in cybersecurity, with significant experience in security operations and engineering required. * 5+ years of experience in a security leadership role required. * Must live within a commutable distance to a firm office with ability to come into the office 3-4 days per week. * Deep expertise in designing and deploying leading security technologies such as SIEM, EDR/NGAV, SOAR, Firewalls, IDS/IPS, DLP, and cloud security platforms. * Strong understanding of modern threat landscape, adversary tactics, and detection engineering methodologies. * Familiarity with cloud security principles and securing hybrid-cloud architectures (e.g., Azure, AWS, GCP). * Familiarity with generative AI security risks and control models (e.g., OpenAI, Anthropic, Harvey AI). * Proven leadership abilities, with a track record of building and leading high-performing teams. * Strong leadership, communication, and executive presentation skills. * Experience working in a global professional services or law firm environment is highly desirable. * Relevant certifications (e.g., CISSP, CISM, GIAC) are desirable. ## Description The Director of Information Security is a key leadership role within the firm's Security Engineering & Operations team that is responsible for developing, overseeing, and maintaining Winston Taylor's cyber security program. This is a critical role that will be primarily responsible for all aspects of security engineering, security operations, and incident response. The ideal candidate is a technologist at heart, has a deep security background, and is comfortable flexing between strategic thinking and tactical execution. The Director will report to the Chief Information Security Officer and will closely collaborate with Information Technology, Security Compliance, and business stakeholders to ensure proactive defense, rapid response to threats, and continuous advancement of security architecture and automation., * Develops and implements a comprehensive security strategy in alignment with the firm's business objectives, goals, and requirements. * Establishes and maintains relationships across internal departments and practice areas to foster a security-aware culture. * Manages a dedicated team; fosters a collaborative and high-performance culture of delivering outcomes. * Evaluates, designs, and implements security solutions and controls to protect the firm's infrastructure, systems, devices, and data. * Collaborates with cross-functional Information Technology teams to assess risks and partners to develop requirements and foster implementation of security controls. * Oversees day-to-day cyber security operations, monitoring, detection engineering, and manages the response to security alerts, escalations, and incidents. * Leads and support security incident response protocols, including investigations, containment, and resolution of security events and incidents. * Develops and maintains security incident response plans, including coordination with internal stakeholders and external partners. * Manage relationships with third-party vendors, managed security providers, and security technology partners. * Develop and track key performance indicators (KPIs) and metrics for detection, response, and security engineering effectiveness. * Identifies and evaluates emerging threats and vulnerabilities and coordinates with stakeholders and system owners to implement the appropriate mitigations. * Ensure continuous improvement through purple teaming, simulation exercises, and lessons learned from incidents. ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization) ## Related Articles - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)