The Senior Director, Cyber Security oversees cyber security measures throughout the organization. This senior-level position will participate in strategic oversight of every aspect of security - from staffing and budgets to protocols and incident response. Reporting directly to the CISO, you will continue to develop and deliver a comprehensive information security program for Insulet Corporation global operations.
Requirements
- Define strategy and lead the Security Operation Center incident response capabilities.
- Define, implement, and maintain corporate security policies and procedures that promote business resiliency (incident response, secure posture, architecture, IAM, data protection).
- Work with CIO, CISO, and other executives to prioritize security initiatives and spending based on risk management and financial methodology.
- Participate in strategic planning for the deployment of information security technologies and program enhancements.
- Identify opportunities to reduce costs and/or increase business benefits while meeting or exceeding expected performance levels.
- Support risk committee meetings; contribute to board-level risk oversight and reporting
- Prepare financial forecasts for security operations and ensure proper maintenance coverage for security assets.
- Provide leadership, mentorship, training opportunities, and guidance to personnel.
- Support education programs focused on user awareness and security compliance.
- Communicate with internal and external stakeholders as part of security awareness and risk response.
- Govern the enterprise cyber incident response plan, including tabletop exercises and business continuity planning.
- Ensure readiness for ransomware, act as incident commander for breaches and other high-impact events.
- Drive collaboration with Product security team to ensure ingestion to alerts, and product specific response actions.
- Define and track key performance indicators (KPIs) and metrics for risk, quantification, compliance, and control effectiveness.
- Deliver quarterly board updates, annual program reviews, and ad hoc reports on incidents, audits, and compliance status.
- Representing the organization in industry forums (e.g., H-ISAC), regulatory discussions, and peer collaborations.
- Stay ahead of emerging technologies (e.g., AI, IoMT, cloud) and evolving regulatory landscapes to inform GRC strategy.
Benefits
- Medical, dental, and vision insurance
- 401(k) with company match
- Paid time off (PTO)
- And additional employee wellness programs