Associate Director of Information Security

This is a senior technical leadership role combining strategy, program ownership, and hands-on security expertise. The Associate Director will lead a small security team and partner closely with IT, Architecture, Legal, Compliance, and other business stakeholders., * Own the strategy, implementation, and ongoing improvement of enterprise DLP and DSPM programs across on-prem, cloud, and SaaS environments.

• Oversee the Third-Party Risk Management (TPRM) program and vendor security assessments.
• Develop and maintain security policies, standards, and best practices.
• Partner with IT, Legal, Compliance, and Architecture teams to identify and mitigate security risks.
• Lead security incident response, investigations, and root-cause analysis.
• Conduct security architecture reviews for applications, platforms, and infrastructure.
• Monitor emerging threats, data protection technologies, and regulatory requirements.

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 8+ years of Information Security experience, including 3+ years in a leadership/management capacity.
• Strong experience leading DLP programs, with hands-on experience using solutions such as Microsoft Purview or Proofpoint.
• Hands-on experience with DSPM platforms in hybrid environments.
• Broad knowledge of network, cloud, and application security.
• Experience with vulnerability management, SIEM, and security monitoring.
• Experience building or managing a TPRM/vendor security program.
• Knowledge of GDPR, CCPA, NIST CSF, ISO 27001, and data governance frameworks.
• CISSP, CISM, or equivalent certification preferred., We’re looking for a security leader who is equally comfortable developing strategy, leading a team, and diving into technical details. Strong communication, problem-solving, organization, initiative, and the ability to influence stakeholders across an organization are critical.