The Associate Director, Security Posture and Hygiene, plays a pivotal leadership role within our organization, steering the strategic direction, design, and implementation of our security posture and hygiene program. This role is at the forefront of enhancing our cybersecurity measures across a diverse and complex infrastructure landscape, including on-premise and cloud models. By continuously monitoring and remediating security control gaps and leveraging the Center for Internet Security (CIS) Top 18 critical security controls, this position aims to bolster our defenses by improving our hygiene of cybersecurity standards and practices.

This position can be based anywhere remotely/virtually anywhere in the U.S.

In this role, you will be responsible for:

• Develop a comprehensive strategy for the security posture and hygiene program.


• Assemble and manage a team dedicated to implementing, assessing, and maturing the CIS Top 18 critical controls and their associated safeguards.


• Develop and execute strategies for continuous monitoring and improvement of security controls and configurations across enterprise systems.


• Ensure the hygiene of security configurations by establishing and enforcing policies, procedures, and standards to prevent unauthorized access, data breaches, and other cyber threats.


• Collaborate with IT, network, and other relevant departments to align security measures with organizational goals and compliance requirements.


• Develop and maintain comprehensive documentation on security controls, assessments, incidents, and improvements.


• Conduct regular assessments to determine the maturity of each security control, identifying areas for improvement and recommending enhancements.


• Foster strong partnerships with technology and domain stakeholders to ensure seamless integration and compliance of security practices across the enterprise.


• Stay abreast of the latest cybersecurity trends, threats, and technologies to adapt and evolve our security strategies accordingly.


• Lead initiatives to educate and train team members and the wider organization on cybersecurity good practices and the importance of a forward-thinking security posture.


• Ensure that all security programs and initiatives adhere to relevant laws, regulations, and policies, continuously updating practices to meet new standards.


• Oversee daily operations, including targeted assessments, risk management, and response strategies, ensuring a high level of security and resilience against cyber threats.


• Build collaborative relationships and partner effectively with business and technology senior leaders.


• Maintain expert-level professional and technical knowledge in relevant domains


• Building metrics and dashboards that will provide stakeholders with actionable insights into the security posture of technologies