Senior Director, Cybersecurity Engineering

Banner Health

. Lead the strategic development, implementation, and ongoing management of Banner Health's cybersecurity engineering framework .

Posted 10/15/2026full-timePhoenix • Arizona • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and implementing cybersecurity strategies, particularly in Zero Trust, IAM, and cloud security. Proven ability to lead distributed teams and ensure compliance with industry standards and regulatory requirements.

Highest-signal resume keywords

Zero Trust Strategy DevelopmentZscaler Cloud Security PlatformIdentity Access Management (IAM)Network Segmentation and MicrosegmentationRegulatory Compliance (NIST, ISO 27001)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity EngineeringData Loss Prevention (DLP)Encryption TechnologiesInfrastructure as Code (IaC)Security ArchitectureVulnerability ManagementCloud Security (AWS, Azure, GCP)Security AutomationConfiguration ManagementSecurity Incident Response

Soft Skills

LeadershipTeam BuildingCollaborationMentoringCommunication

Tools & Technologies

ZscalerOktaAzure ADPing IdentitySailPointCyberArkSIEMSOAREDRSecurity Analytics Platforms

Certifications & Qualifications

CISSPCISMCCSPCISA

Industry Keywords

NIST SP 800-207GDPRHIPAAPCISarbanes-OxleyCCPASOC 2CIS ControlsDevSecOpsDigital Transformation

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead the strategic development, implementation, and ongoing management of Banner Health's cybersecurity engineering framework
Shape and execute the enterprise cybersecurity engineering strategy focused on Zero Trust, network security, IAM, cloud security, and data protection
Develop and execute a comprehensive Zero Trust strategy and maturity roadmap
Provide executive leadership on security architecture decisions and investments
Collaborate with C-suite and business unit leaders on digital transformation initiatives
Design and implement micro-segmentation, ZTNA, and network security strategies
Lead deployment and optimization of the Zscaler cloud security platform
Establish identity-centric controls, MFA, adaptive authentication, PAM, JIT access, and identity governance
Develop data classification frameworks and deploy DLP, encryption, rights management, and CASB technologies
Establish configuration baselines, hardening standards, vulnerability management, patch management, IaC security, and DevSecOps practices
Build, mentor, and lead distributed security engineering and architecture teams
Develop talent pipelines, succession planning, security awareness training, and an inclusive remote work culture
Ensure compliance with regulatory requirements and industry frameworks including NIST and ISO 27001
Coordinate security assessments with audit, risk, and compliance teams
Manage vendor relationships and third-party security assessments
Analyze security environments, identify deficiencies, document current-state architecture, and integrate emerging security solutions
Advise senior and executive leadership on security technologies based on total cost of ownership, ROI, and strategic value
Participate in occasional off-site travel and on-call incident response

Requirements

What you’ll need

Master's degree in Cybersecurity, Information Security, Information Systems, Computer Science, or related field, or equivalent of education and work experience
Ten years of current and progressive experience in information security and cybersecurity leadership
Five plus years in senior leadership roles managing enterprise security programs
Proven track record implementing protective technology in complex enterprise environments
Extensive hands-on experience with Zscaler or similar cloud security platforms
Deep expertise in network segmentation, microsegmentation, and software-defined perimeter technologies
Strong background in IAM platforms, including Okta, Azure AD, Ping Identity, SailPoint, and CyberArk
Experience with DLP, CASB, encryption, and tokenization
Demonstrated success with configuration management and infrastructure as code tools
Proven ability to lead and manage distributed remote teams effectively
Expert knowledge of zero trust principles and frameworks, including NIST SP 800-207, Forrester, and Gartner
Advanced understanding of network protocols, architectures, and security controls
Proficiency with AWS, Azure, GCP, and cloud-native security
Strong knowledge of SAML, OAuth, OIDC, Kerberos, and LDAP
Familiarity with SIEM, SOAR, EDR, and security analytics platforms
Understanding of DevSecOps practices and security automation
Proficient understanding of HIPAA, HITECH, PCI, Sarbanes-Oxley, GDPR, CCPA, SOC 2, ISO 27001, NIST CSF, and CIS Controls
Technical project experience designing, developing, integrating, and implementing solutions for complex technical and business issues
On-call availability for security incidents and escalations
Preferred: CISSP, CISM, CCSP, CISA, and vendor-specific certifications

Benefits

Comp & perks

Option to participate in a variety of health, financial, and security benefits
May be eligible for the Management Incentive Program
Total Rewards package
Annual team gatherings, conferences, or critical vendor meetings (travel opportunity)