POSITION OVERVIEWWe are seeking a seasoned and visionary Director of Cybersecurity to lead and mature our organization’s security posture. This is a leadership role responsible for establishing strategy, owning execution, and driving a security-first culture across the enterprise. The ideal candidate is a self-starter who thrives with autonomy, can translate complex security challenges into actionable programs, and brings deep hands-on experience alongside the executive presence to influence at every level of the organization.This role requires someone who is equally comfortable architecting Zero Trust frameworks, leading an incident response war room, and providing risk metrics for presentation to the executive team. You will assist in the full security lifecycle, from policy to tooling to people, and provide actionable information and propose solutions for protecting the organization’s assets, infrastructure, and data.KEY RESPONSIBILITIESSecurity Strategy & LeadershipAssist in defining and continuously improve the organization’s enterprise cybersecurity strategy and roadmapLead security initiatives independently, with minimal oversight, from concept through successful deliveryBuild, mentor, and manage a high-performing cybersecurity team; foster a culture of accountability and continuous improvementProvide actionable intelligence and metrics for presentation to executive leadership on risk, compliance, and emerging threatsAssist in establishing and maintaining security governance frameworks, policies, standards, and proceduresOwns strategy and management of security operationsIncident Response & Threat ManagementAssist in the development, maintenance, and execution of the Incident Response (IR) program, including playbooks, tabletop exercises, and post-incident reviewsServe as the secondary incident commander for security events; coordinate cross-functional response teamsOversee threat intelligence operations and integrate findings into proactive defense strategiesConduct and oversee vulnerability management, penetration testing coordination, and risk remediation programsNetwork & Infrastructure SecurityManage end-to-end network security architecture including segmentation, monitoring, and access controlsManage and optimize network security toolingImplement and enforce Zero Trust network access (ZTNA) principles across on-premise and remote environmentsSecurity TestingOwn strategy and execution of testing security controls via automated testing, red/blue/purple teaming, and third-party penetration testingCloud & Endpoint SecurityProvide guidance and assist in cloud security strategy, architecture, and compliance across multi-cloud and hybrid environmentsOversee endpoint detection and response (EDR/XDR) programsManage Mobile Device Management (MDM) programs; preferred experience with Microsoft IntuneAdminister and mature Identity & Access Management (IAM) using Role-Based Access Control (RBAC) principles along with Just in Time (JIT) access and Privileged Access Management (PAM)IT Operations & ToolingOversee RMM/PSA security integrationsPartner with IT operations to ensure security is embedded in all infrastructure and tooling decisionsWork with the DevSecOps Manager to support DevSecOps practices, ensuring security is integrated throughout the software development lifecycle (SDLC)Compliance & Risk ManagementAssist the owner of the organization’s security controls for our compliance programs (e.g., SOC 2, ISO 27001, NIST CSF, or relevant frameworks)Conduct and oversee regular risk assessments, audits, and third-party vendor security reviewsMaintain up-to-date knowledge of regulatory landscape and ensure organizational adherenceREQUIRED QUALIFICATIONSBachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, Information Techonlogy or equivalent practical experience.8+ years of progressive cybersecurity experience, including 4+ years in a leadership or management capacityMinimum of 10+ years in Information Technology/CybersecurityDemonstrated ability to define and execute security programs with limited oversight in a fast-paced environmentDeep expertise in incident response planning, execution, and post-incident analysisStrong knowledge of network security architecture, segmentation strategies, firewalls, and IDS/IPSProven experience implementing and operating Zero Trust architectureHands-on cloud security experience (Azure, AWS, or GCP) including cloud-native security tooling and CSPMExperience managing MDM solutions for endpoint lifecycle, policy enforcement, and complianceSolid understanding of RBAC models and identity governance in enterprise environmentsFluency with DevSecOps concepts including secure CI/CD, SAST/DAST tooling, and shift-left security practicesExceptional communication skills; able to present complex technical risk to non-technical stakeholdersExecutive communication skills; able to present strategy and reports to executive leadershipMust be based in Austin, TX or willing to relocate