Endeavor

Compensation

Full Description

Job Description: • Lead enterprise cybersecurity operations and engineering programs, including strategy, risk governance, roadmap development, budgeting, KPI reporting, and executive communications • Contribute to cybersecurity policies, standards, procedures, and control frameworks • Develop governance forums, steering committee materials, risk updates, and business cases for senior leadership • Partner with legal, compliance, privacy, internal audit, technology, and business stakeholders • Drive consistent security practices across corporate, cloud, application, and business environments • Translate threat, control, and assessment findings into prioritized remediation plans • Provide executive oversight for SOC/MSSP performance, alert monitoring, incident triage, escalation management, and operational readiness • Own incident response planning, runbooks, tabletop exercises, and cross-functional response coordination • Oversee threat intelligence, threat detection, threat hunting, and vulnerability management capabilities • Ensure preparedness to protect, detect, respond to, and recover from cybersecurity events • Develop and monitor operational metrics and service-level indicators • Oversee cybersecurity technology and control capabilities across on-premises, cloud, endpoint, identity, and network domains • Partner with infrastructure, platform, and software engineering teams to embed security into architecture and workflows • Support secure development lifecycle, software assurance, secure coding, and application security initiatives • Guide selection and optimization of SIEM, EDR, IDS/IPS, firewalls, vulnerability management, logging, monitoring, and protection technologies • Promote automation, orchestration, and process simplification • Lead cyber risk assessments across infrastructure, applications, vendors, business processes, and emerging technologies • Support compliance and control maturity for NIST, ISO 27001, PCI-DSS, SOC, SOX, GDPR, privacy, and other requirements • Provide security leadership for vendor reviews, architectural reviews, major initiatives, and transformation programs • Build relationships with business and technology leaders to enable growth, resilience, and informed risk-taking • Champion security awareness, education, and culture-building efforts • Lead, coach, and develop cybersecurity managers and individual contributors • Foster accountability, collaboration, continuous improvement, and service-oriented partnership • Mentor technical teams on incident response, operational excellence, architecture, and executive communication • Maintain the cyber risk register and risk governance process • Support procurement calendar, budget, actuals, strategy documents, project portfolios, roadmaps, and C-suite/IT leadership materials Requirements: • Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience • 12+ years of progressive cybersecurity experience, including leadership of enterprise security programs in complex, high-growth, or globally distributed organizations • 7+ years of leadership experience managing managers, cross-functional teams, and/or external service providers across multiple cybersecurity domains • Demonstrated success building or maturing cybersecurity governance, program management, security operations, and security engineering capabilities • Strong working knowledge of cybersecurity frameworks, regulatory requirements, and assurance practices, including NIST CSF, ISO 27001, PCI-DSS, SOC, SOX, data privacy, and related standards • Experience leading or overseeing incident response, threat intelligence, vulnerability management, detection engineering, and security monitoring programs • Strong technical understanding of cloud security, identity and access management, endpoint protection, network security, logging and monitoring, system hardening, and enterprise security architecture • Experience working closely with software development and infrastructure teams to integrate security into lifecycle management, architecture, and operational processes • Proven ability to define metrics, communicate risk clearly, and present meaningful security insights to operational, technical, and executive stakeholders • Strong business judgment and ability to balance risk reduction, operational efficiency, and strategic enablement • Excellent written and verbal communication skills, with ability to influence across all levels of the organization • Must be based in one of the listed remote locations: New York, Connecticut, California, New Jersey, Texas, or Ohio Benefits: • Short- and long-term incentives • Growth and developmental opportunities • Health care • Retirement • Vacation and other paid time off • Additional offerings • Reasonable accommodations for qualified individuals with disabilities