Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Director of Information Security & Strategic Resilience

Genesys Works2 open roles

Where
US
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDirector of Information Security & Strategic ResilienceGenesys Works · US

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Genesys Works's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 3 days ago

The posting

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Director of Information Security & Strategic Resilience based in the United States.

The Director of Information Security & Strategic Resilience will serve as the organization’s senior cybersecurity leader, driving the development and maturity of an enterprise-wide security and resilience program. Working closely with executive leadership, this role will establish risk-based strategies that protect sensitive information while enabling digital transformation and organizational growth. The position combines strategic oversight with hands-on expertise across security architecture, risk management, incident response, and cloud security. It will guide governance, compliance, threat detection, and business continuity initiatives while strengthening security practices across technology platforms and third-party partnerships. The Director will also advise senior leaders on cybersecurity investments, emerging technology risks, and resilience priorities. This is an opportunity to shape a forward-looking security culture in a remote-first environment while balancing robust protection with innovation and mission impact.

Accountabilities

  • Cybersecurity Strategy & Risk Management: Develop and execute a multi-year cybersecurity and resilience roadmap aligned with organizational priorities. Establish a risk-based security program informed by frameworks such as CIS Critical Security Controls, NIST CSF, NIST 800-53, SANS, and FAIR, supporting informed decisions on risk mitigation, acceptance, transfer, and avoidance.
  • Governance, Policies & Compliance: Create and continuously improve enterprise security policies, standards, and procedures covering identity and access management, data protection, cloud security, application security, and incident response. Support audits, cyber-insurance requirements, regulatory obligations, and contractual compliance.
  • Third-Party Risk Management: Establish and oversee security assessments and risk management processes for vendors, SaaS platforms, cloud providers, and external partners handling sensitive information.
  • Security Architecture & Digital Transformation: Advise on security for identity and access management, cloud data platforms, analytics, integrations, enterprise SaaS, portals, and custom applications. Provide architectural guidance across Azure, Microsoft 365, Defender, Purview, and Intune while promoting secure software development and application testing.
  • Cryptography & Secrets Management: Define enterprise practices for encryption, key management, tokenization, certificate lifecycle management, and secrets protection. Ensure sensitive data is appropriately protected across cloud services, integrations, automation, and custom applications.
  • Vulnerability Management & Threat Analysis: Lead asset discovery, vulnerability scanning, remediation prioritization, penetration testing, and security assessments across networks, applications, cloud environments, and third parties. Apply threat modeling and business-risk analysis to guide remediation and control design.
  • Security Operations & Detection: Mature endpoint detection and response (EDR), security information and event management (SIEM), and cloud-native security capabilities. Coordinate with managed security service providers (MSSPs) to strengthen monitoring, threat detection, and response.
  • Incident Response & Resilience: Own incident response planning, tabletop exercises, and incident coordination with legal counsel, forensic specialists, and cyber-insurance partners. Lead business continuity and resilience planning, post-incident reviews, and continuous improvement initiatives.
  • Data Protection, Privacy & AI Risk: Oversee data loss prevention, data classification, and privacy controls. Collaborate with data and analytics teams to safeguard sensitive stakeholder information and assess security, privacy, and ethical risks associated with AI, automation, and emerging technologies.
  • Security Awareness & Performance Metrics: Develop security training tailored to staff, interns, and leadership. Promote shared responsibility for security and define meaningful KPIs and KRIs covering detection, response, vulnerability remediation, control coverage, and risk trends.
  • Executive & Board Engagement: Support the CIO with board-level cybersecurity updates, risk reporting, and investment recommendations. Translate complex technical issues into clear business insights and act as a trusted security advisor to senior leadership.
  • Team & Capability Development: Identify opportunities to expand internal security capabilities as the program evolves, balance internal resources with external expertise, and mentor technology staff in security best practices.
  • Extensive Security Experience: 15+ years of experience in information security, with progressive responsibility in enterprise or cloud-first environments and demonstrated leadership in both strategic planning and hands-on security operations.
  • Microsoft Security Expertise: Strong familiarity with the Microsoft security ecosystem, including Azure, Microsoft 365, Defender, SharePoint, and Intune.
  • Security Engineering & Cryptography: Experience with secrets management solutions such as HashiCorp Vault or equivalent, encryption, key management, and related cryptographic controls.
  • Operational Security Skills: Hands-on experience with incident response, SIEM, EDR, data loss prevention, vulnerability management, and penetration testing.
  • Application & Cloud Security: Working knowledge of secure software development, enterprise application security, cloud security architecture, and secure integration practices.
  • Risk Analysis & Threat Modeling: Strong understanding of FAIR risk analysis, threat modeling, security assessments, and risk-based remediation approaches.
  • External Partner Management: Experience collaborating with MSSPs, vendors, and external security partners to deliver effective security capabilities.
  • Executive Communication: Proven ability to communicate complex technical and risk-related topics clearly to executives and boards, supporting informed decisions and investment priorities.
  • Strategic Leadership: Ability to balance security controls with usability, innovation, and organizational objectives while building a sustainable security culture.
  • Preferred Experience: Background in nonprofit, education, or other mission-driven organizations is beneficial but not required. Familiarity with data governance, privacy principles, and AI risk management is also an advantage.
  • Preferred Certifications: CISSP, CISM, CRISC, GIAC, or other relevant security certifications are welcome but not mandatory.
  • Competitive annual salary of $135,000–$140,000, depending on experience and qualifications.
  • Medical, dental, and vision insurance.
  • Company-paid life and disability insurance.
  • Generous paid time off and 10 company-paid holidays.
  • Additional “Soft Close” period between Christmas and New Year’s.
  • 403(b) retirement savings plan with company matching.
  • Communications allowance.
  • Focus Fridays to support dedicated work time and productivity.
  • Flexible work arrangements in a remote US-based role.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Genesys Works's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Genesys Works's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Genesys Works's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.