> Markdown version of [/jobs/ext/4362829-director-information-security](https://www.wearedevelopers.com/jobs/ext/4362829-director-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director, Information Security

- **Company:** Employers Partner Inc
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $120,000.0 - $185,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Information Systems, Microsoft Dynamics CRM, Identity and Access Management, Microsoft Dynamics, Operational Data Store, Zero Trust Network Access, National Institute of Standards and Technology Cybersecurity Framework, Information Technology
- **Published:** October 7, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=62f7bdea14e01380

## About the Role

* Seven or more years in technology leadership, security program management, security architecture, or equivalent operational leadership
 * Demonstrated experience managing complex, cross-functional programs with a small team
 * Familiarity with security program governance, vendor management, and budget operations
 * Experience in regulated industries and comfort navigating compliance calendars and audit cycles
 * Track record of delivering program outcomes in environments where structure must be built, not inherited
 * Leadership and Judgment
 + Exceptional organizational and communication skills: this role runs on clarity and follow-through
 + Comfortable operating with ambiguity and exercising independent judgment when the CISO is not available
 + Ability to build credibility across functions without formal authority
 + Orientation toward outcomes and accountability: tracks what matters, drops what does not
 * Technical Scope
 + Security architecture familiarity: cloud security design across AWS and Azure, identity and access management, and zero-trust principles
 + Working knowledge of security program frameworks (NIST CSF, ISO 27001 principles) sufficient to manage against them
 + Familiarity with security technology portfolio components to support rationalization and vendor evaluation
 + Comfortable with data: program metrics, budget models, and risk registers are daily tools, * Bachelor's or Master's degree in Computer Science, Data Science, Information Systems, Business, or a related field.

## Description

+ Own the security program roadmap: monitor progress against Phase 1 milestones, surface blockers early, and escalate to the CISO with recommended actions rather than status reports
 + Begin technology portfolio rationalization in Phase 1: the strategy's three-year cost projection depends on this work starting immediately, not in Phase 2
 + Manage the security budget with visibility into spend, variance, and vendor commitments across the full portfolio
 + Own and evolve all security vendor relationships for non-MDR contracts: renewals, performance reviews, and contract alignment with program direction
 + Maintain the technology portfolio inventory and rationalization tracker actively from Month 1
 * Own Security Architecture
 + Serve as the program's embedded security architect, ensuring security design principles are present at every major technology decision
 + Own the security architecture function in the absence of a separate Security Architect position: this is a deliberate consolidation, not a capability gap
 + Participate in all major technology design reviews with particular focus on the bifurcated cloud footprint: AWS for workloads and AI functions; Azure for Dynamics 365, M365, and Entra ID
 + Drive the on-premises Active Directory deprecation plan in Phase 1 as a prerequisite for identity consolidation
 + Maintain alignment between the IAM modernization project and the CISO organization's security design requirements
 * Drive Cross-Functional Coordination
 + Serve as the CISO's proxy in cross-functional meetings where security perspective is needed but the CISO is unavailable
 + Coordinate security engagement across active modernization programs (Dynamics 365 CRM, AI adoption, digital distribution) to ensure design-stage participation is consistent and tracked
 + Manage the compliance coordination model with the GRC function to ensure no regulatory deadline is missed
 + Drive the ERM partnership cadence with BCP/DR program owners
 * Own Continuous Improvement
 + Track every nonconformity, corrective action, and after-action finding to closure
 + Own the program metrics dashboard: translate operational data into executive-ready reporting for the CIO and Board
 + Lead the quarterly program review cycle and annual strategy refresh process, * Remote: This role is a remote (work from home (WFH) opportunity) and only open to candidates currently located in the United States and able to work without sponsorship.
 * It requires a suitable space that provides a private and quiet workplace.
 * Expected Work Hours: Schedules are set to accommodate the requirements of the position and the needs of the organization and may be adjusted as needed.
 * Travel: May be required to travel to off-site location(s) to attend meetings, as necessary