Director of Cyber Security
Job Overview:
ANC is seeking a highly experienced and strategic Director of Cyber Security to lead our security initiatives and ensure the highest levels of protection for our clients. The ideal candidate will be a visionary leader capable of guiding our security efforts, performing comprehensive audits, engaging in high-level incident response, and supporting our Compliance-as-a-Service (CaaS) requests. This role requires a proactive individual who can effectively communicate security risks to non-technical stakeholders and engage in marketing and sales activities to position ANC as a market leader in security services.
Key Responsibilities:
Security Leadership & Strategy:
- Internal Security Audits:
- Conduct quarterly internal audits of ANC's security measures.
- Client Security Audits:
- Perform quarterly audits of paid services for clients, utilizing logs and other tools to store evidence.
Client Engagement & Incident Response:
- vCSO/ Engagements:
- Provide 10-15 hours per month per client for vCSO engagements, including tabletop exercises and other security services.
- vCIO/ Engagements:
- Provide 2-4 hours per quarter per client for vCIO engagements, including business growth and development planning.
- Incident Response:
- Act as the high-level authority in incident response for clients, providing leadership and guidance during security incidents.
- CaaS Support:
- Support CaaS requests from Compliance Coordinator, focusing on evidence gathering and compliance work.
Data Management & Evidence Storage:
- Audit & Compliance Data:
- Verify Cybersecurity controls and gather evidence.
- Develop and maintain a robust system for storing data and proof from audits and compliance activities.
Marketing & Sales Support:
- Presentations:
- Deliver 1-2 security presentations per month at tech shows, marketing events, and business after-hours.
- Sales Engagement:
- Collaborate with the sales team to evaluate client needs, position security solutions, attend sales meetings, and pitch solutions.
- Bill of Materials (BOM):
- Build BOMs for vCSO offerings to enable finance to create quotes.
Thought Leadership & Content Development:
- Industry Insights:
- Stay current with industry trends and tools for quantifying risk, dedicating 2-4 hours per week to research and whitepaper development.
- Marketing Collaboration:
- Work with the marketing team to determine the frequency of LinkedIn posts and other promotional activities.
Program Development:
- vCSO Program Design:
- Help design the vCSO program, including deliverables and scoping.
Administrative Leadership:
- Vision & Direction:
- Participate on the Admin team to help shape the vision and direction of ANC.
Qualifications:
- Education:
- Bachelor's degree in Information Security, Computer Science, or a related field. Advanced degree preferred.
- Experience:
- Minimum of 10 years of experience in information security, with at least 5 years in a leadership role.
- Certifications:
- Relevant certifications such as CISSP, CISM, or CISO preferred.
- Skills:
- Strong knowledge of security frameworks and compliance requirements.
- Excellent communication skills with the ability to convey complex security concepts to non-technical stakeholders.
- Proven track record in incident response and security audits.
- Experience with security tools and technologies for evidence gathering and data storage.
- Ability to develop and deliver engaging presentations.
- Collaborative mindset with experience working with sales and marketing teams.
- Strategic thinker with a vision for shaping and evolving security programs.
Benefits:
- Salary: $90,000 to $125,000 DOE
- Retirement Plan: 401K with employer matching
- Profit Sharing: Eligible for profit sharing
- Healthcare: Comprehensive medical and dental insurance
- Additional Perks:
- Flexible working hours and remote work options
- Professional development opportunities
- Paid time off and holidays
- Collaborative and supportive work environment