> Markdown version of [/jobs/ext/4597012-director-of-it-security](https://www.wearedevelopers.com/jobs/ext/4597012-director-of-it-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director of IT Security

- **Company:** ITAC
- **Location:** Birmingham, AL, United States
- **Experience:** Expert
- **Salary:** $180,000 - $210,000
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cyber Security, Data Stores, Computer Networking Systems, Information Technology
- **Published:** November 6, 2026
- **Apply:** https://itacsolutions.com/jobs/Job/37913/

## About the Role

* Bachelor's degree in Cybersecurity, Computer Science, or a related field
 * 5-10 years in IT, networking, or security, at a senior level
 * Strong networking and infrastructure background
 * Working knowledge of HIPAA and SOC 2 audit processes
 * At least one security certification such as CISSP, CISM, CCISO, CASP+, or an Azure or AWS security cert
 * Hands-on exposure to AI security risks and controls (preferred)
 * Healthcare industry experience (preferred)

## Description

Our client, a lean, growing technology company, is creating a Director of Security to take the wheel on protecting the business and its customers. You'll be the single point of ownership for how the company manages risk, passes scrutiny from demanding enterprise clients, and keeps its environment locked down. The work is hands-on and strategic at once: tighten what's already in place, partner closely with the infrastructure team, and help the company adopt AI the right way. A team may come later, but you'll start as the expert in the seat., * Own the security program from top to bottom, including risk assessments, internal security policies, and readiness for yearly audits with an outside audit firm

 * Answer the detailed security reviews that major customers send each year
 * Vet third-party vendors on how they store data and handle recovery and continuity planning
 * Run employee security awareness efforts and make sure training sticks
 * Partner with infrastructure on patching, updates, and the overall security of the technology environment
 * Keep healthcare data privacy requirements on track across systems and processes
 * Review AI tools and use cases for security risk and put the right guardrails around them