Director of Information Security

Description

• Oversee the IT Business Continuity and Disaster Recovery (BCP/DR) programs, including Business Impact Analysis (BIA) and scenario-based recovery exercises.
• Provide executive-level reporting on risk posture, incidents, and metrics that connect security outcomes to business and financial value.
• Ensure strong alignment between security strategy, business goals, and regulatory requirements, particularly in the context of emerging AI use cases, machine learning models, and data governance.
• Maintain strict adherence to financial controls — including vendor spend, contract review, and security-related procurement — demonstrating accountability for budget stewardship and cost transparency.
• Stay ahead of evolving threats, particularly those involving AI misuse, data poisoning, and adversarial attacks, and integrate defenses into enterprise security posture.
• Partner with data, application, and operations leaders to ensure secure design, access control, and model integrity across AI and analytics systems.
• Develop and enforce comprehensive policies, standards, and procedures aligned with frameworks such as NIST CSF 2.0, C2M2, and ISO 27001.
• Lead and mentor a high-performing information security team, fostering a culture of ethics, service, and continuous learning.
• Serve as the executive liaison for internal and external audits, compliance reviews, and regulatory reporting related to cybersecurity.
• Lead the design, implementation, and continuous improvement of Summit’s enterprise information security program — covering cybersecurity, AI and data protection, risk management, and incident response.
• Direct risk assessments and audits to identify vulnerabilities, ensuring mitigation strategies are financially sound and proportionate to organizational risk appetite.

Requirements

• Demonstrated track record of fostering a culture of trust, compliance, and ethical leadership .
• Demonstrated experience managing security for cloud and hybrid environments, and integrating controls for AI, analytics, and data platforms.
• Bachelor’s or Master’s degree in information security, Computer Science, Information Technology, or a related field.
• Strong knowledge of AI and data security principles, including model governance, data ethics, and emerging threats tied to generative AI.
• 10+ years of experience in information security, including at least 5 years in a senior leadership or management capacity.
• Proven record of financial accountability, including budget ownership, cost optimization, and vendor governance.
• Uncompromising integrity and sound judgment in handling confidential and financial information.
• Exceptional leadership and communication skills — able to translate complex security concepts into clear, actionable guidance for executives and teams.
• Deep expertise in cybersecurity, risk management, and incident response, including threat intelligence, vulnerability management, and data protection.
• Ability to lead under pressure with discipline, humility, and transparency.
• Advanced security certifications strongly preferred (CISSP, CISM, CISA, CRISC, CCISO, etc.).
• Strong grasp of financial concepts related to technology management: budgeting, forecasting, cost-benefit analysis, and vendor contract negotiation.
• Experience implementing and auditing against leading security frameworks (NIST CSF, C2M2, ISO 27001, SOC 2) and regulatory standards (GDPR, HIPAA, PCI, etc.).

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance