> Markdown version of [/jobs/ext/3835092-it-security-director](https://www.wearedevelopers.com/jobs/ext/3835092-it-security-director). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security - Director - **Company:** SHERLOCK GROUP, INC. - **Location:** Boca Raton, FL, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Communications Protocols, Cyber Security, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Identity and Access Management, Internet Security, Intrusion Detection Systems, PCI Data Security Standards, Cloud Services, Web Application Security, Information Technology Security Auditing, Security Information and Event Management, Transmission Control Protocol (TCP), Software Vulnerability Management, File Transfer Protocol (FTP), Software Security - **Published:** October 19, 2026 - **Apply:** https://www.careerjet.com/jobad/us7b79b34bb6b6542d88c11d818194bf2a ## About the Role * Eight (8) years progressive experience in Information Security, or related field * Three (3) years' experience in a supervisory or senior level (plan, organize, and direct the work of a technical staff) * Four (4) years' experience in technical program management * Active proficiency in the following areas: * Networking and communications protocols (TCP, HTTP, FTP, DNS, et.) * Security architecture: firewalls, trust-boundaries, encryption, segmentation strategies, Cloud services, etc. * Internet security, including: transport security and web application security * Incident response and management (SIEM, IDS, forensic techniques, etc.) * Security auditing (vulnerability and penetration testing) * Identity and access management * Business resilience planning * Data privacy, including GDPR, CCPA, etc. * Compliance management, including service provider management, PCI DSS and HIPAA compliance auditing ## Description Leading IT company in Boca Raton, FL is seeking a Director of Information Security and Privacy to manage a small team of Security Analysts maintain a consolidated privacy and security program and conduct audits to achieve validation of compliance with PCI, DSS, HIPAA and other privacy laws and compliance mandates for the company technology and security program. We are looking for a Director with a strong background in Information Security, Privacy, and Compliance. The ideal candidate will have climbed the ranks as a Security Analyst, Engineer/Architect, Lead or Manager and is now at the Director or CISO level. This position is highly technical and involves working with the various technical groups and critical infrastructure to build effective analysis capabilities to better protect the organization from cyber-attacks and threats. This position reports directly to the CTO. Responsibilities: * Develop and maintain a consolidated privacy and security program that integrates requirements across various compliance mandates, including PCI DSS, HIPAA, HITRUST and various privacy laws, including GDPR and CCPA. * Actively manage the implementation of and validate adherence to security practices across the organization to comply with the various privacy law and compliance mandates. * Support and lead a team of security practitioners in various practices such as incident management, application security, vulnerability management, and auditing. * Resolve allegations of non-compliance with the corporate policies or notice of information practices. * Govern security-specific metrics that demonstrate the performance of the security program including reduction in program cost, reduction in security incidents, and positive independent security assessment outcomes. * Report on a periodic basis to the CTO or committee regarding the status of the security and privacy program. * Mature the Privacy and Security program to better support the organization's core business strategy as an enabler for driving business development initiatives. * Provide strategic guidance to corporate officers regarding risk to information resources and technology. * Provide leadership in the planning, design and evaluation of privacy and security related projects. * Conduct audits of business partners to achieve independent validation of compliance with PCI, DSS, HIPAA and other privacy laws and compliance mandates for the company's technology and security program. * Maintain and mature a corporate-wide privacy and security training program. * Oversee appropriate sanctions for failure to comply with the corporate privacy policies and procedures. * Actively monitor the regulatory and legislative landscape for changes in requirements to protect the security and privacy of regulated data., SherlockTalent is committed to protecting and respecting your privacy. We'll only store and use your personal information to administer your account and to provide you with information by email and SMS related to your account, job search, and career. Referral Source Submit Copyright © 2026 SherlockTalent | Designed by Josh Piller | Maintained by We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking "Accept", you consent to the use of ALL the cookies. . Manage consent Close Privacy Overview This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt out of these cookies. But opting out of some of these cookies may affect your browsing experience. Necessary Always Enabled Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensure the basic functionalities and security features of the website. These cookies do not store any personal information. Non-necessary Any cookies that may not be particularly necessary for the website to function and are explicitly used to collect user personal data via analytics, ads, and other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.