IT Security Director

About the role

The organization is embarking on a cybersecurity transformation to strengthen its security posture and protect critical information assets. As the IT Security Director, you will lead enterprise‑wide security initiatives and embed a security‑first culture across the business.

Key responsibilities

• Develop and execute the cybersecurity strategy, roadmap, and transformation programmes.
• Lead governance, risk management, compliance and security assurance activities.
• Define, maintain and enforce security policies, standards and control frameworks aligned with best practices.
• Oversee security operations, vulnerability management, incident response and cyber‑resilience efforts.
• Drive cloud security, infrastructure security, application security and identity & access management initiatives.
• Ensure compliance with regulatory, contractual and customer security requirements.
• Manage risk assessments, remediation programmes and third‑party security reviews.
• Lead audits, certifications (e.g., ISO 27001) and other compliance activities.
• Partner with business and technology stakeholders to embed security controls into processes and projects.
• Provide regular reporting and strategic recommendations to senior leadership.
• Manage budgets, vendor relationships and security improvement programmes.
• Promote security awareness and a strong security culture.

Required profile

• Bachelor’s degree in Information Security, Cybersecurity, IT, Computer Science, Engineering or related field.
• Minimum 12 years of experience in information security, cybersecurity or technology risk leadership.
• Proven track record of leading enterprise security programmes and transformation initiatives.
• Strong experience in security governance, risk management, compliance and audit management.
• Professional certifications such as CISSP, CISM, CRISC, CGEIT or CCSP highly preferred.
• Excellent leadership, communication and stakeholder‑management skills.

Required skills

• ISO 27001 framework
• NIST framework
• CIS Controls
• Cloud security
• Identity & Access Management (IAM)
• Data protection
• Third‑party risk management
• Security operations
• Vulnerability management
• Incident response