Senior Director - Security Posture & Exposure Management

The Senior Director will lead enterprise-wide vulnerability management and security exposure reduction across complex technology environments. This strategic, hands-on leadership role is responsible for identifying security weaknesses, assessing their real-world risk, and ensuring timely remediation across cloud, on-premises infrastructure, applications, endpoints, and specialized environments. You will oversee multiple security functions, including vulnerability management, application security, offensive security, advanced vulnerability discovery, and exposure reporting. By combining deep technical expertise with organizational leadership, you will transform vulnerability scanning into a risk-based, data-driven security capability. Working closely with technology leaders, security operations, and risk management teams, you will strengthen accountability and improve the organization's overall security posture. This is an opportunity to shape enterprise security strategy, develop high-performing teams, and deliver measurable reductions in cyber risk.

• High school diploma or equivalent, with at least 4 years of experience in cybersecurity, information technology, or a related field.

• At least 10 years of hands-on professional cybersecurity experience, primarily in vulnerability management, security operations, offensive security, or a closely related discipline.

• At least 5 years of experience leading a security function, with a minimum of 3 years managing people leaders.

• Extensive practical experience with vulnerability management platforms, security scanning, exploitability analysis, attack surface management, and remediation operations across hybrid cloud and on-premises environments. Experience with operational technology or regulated laboratory environments is an advantage.

• Proven ability to lead enterprise-scale security organizations, manage multiple teams through their leaders, establish strategic priorities, and deliver measurable improvements in security performance.

• Strong understanding of application security practices, including static and dynamic application security testing (SAST/DAST), software composition analysis, and secure software development, with the ability to integrate application findings into enterprise vulnerability management.

• Demonstrated expertise in developing risk-based prioritization models that technology teams trust and use to guide remediation decisions.

• Experience implementing remediation SLAs, escalation mechanisms, and accountability frameworks that improve remediation speed and outcomes.

• Working knowledge of offensive security and red-team practices, including the ability to assess findings, guide testing priorities, and translate discoveries into sustainable security improvements.

• Experience designing or modernizing security tooling architectures, automation capabilities, integrations, and data pipelines to improve coverage, reliability, and operational efficiency.

• Strong analytical and data management skills, including defining meaningful metrics, validating data quality, identifying coverage gaps, and communicating exposure trends and risk decisions clearly.

• Excellent leadership, communication, and stakeholder management skills, with the ability to influence senior technology leaders and drive action beyond direct reporting relationships.

• Strong judgment and problem-solving capabilities, particularly when evaluating vulnerability findings, balancing competing risks, and allocating remediation resources effectively.

• A bachelor's degree in cybersecurity, computer science, information technology, or a related field is preferred.