Director, Information Security

About This Role

Lead and operate a comprehensive information security program for a national, mission-driven, nonprofit organization. This role provides strategic and operational leadership across cybersecurity operations, governance, risk management, and compliance to protect organizational systems, data, and customers.

Responsibilities

• Lead enterprise information security strategy, policies, and standards
• Own governance and compliance programs (SOC 2, HIPAA, HITRUST, NIST)
• Oversee cybersecurity operations, incident response, and vulnerability management
• Lead, mentor, and develop the information security team
• Conduct risk assessments and manage risk treatment plans
• Oversee security tools, vendors, and cost-effective controls
• Report security posture, risk, and compliance metrics to leadership
• Support regulatory, customer, and third-party security assessments

Requirements

• 8+ years in information security, cybersecurity, or IT risk management
• 5+ years leading enterprise security programs
• Experience with SOC 2, HIPAA, HITRUST, or NIST frameworks
• Strong leadership, communication, and stakeholder engagement skills

Qualifications

• Bachelor’s degree or equivalent experience
• 8+ years in information security, cybersecurity, or IT risk management, with 5+ years leading enterprise security programs

Skills

* Required skills

Benefits

Certifications