FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior Director – Cyber Security
Hornblower Group. Lead the day-to-day operations of Hornblower’s information security program .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in leading information security operations, including incident response, vulnerability management, and compliance with PCI DSS and SOC 2 standards. Proficient in managing security tools and relationships with MDR/MSSP providers while ensuring effective security architecture across various platforms, including Microsoft 365 E5.
Highest-signal resume keywords
Information Security LeadershipIncident Response ManagementMicrosoft 365 E5 Security CapabilitiesPCI DSS ComplianceVulnerability Assessment and Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Incident ResponseVulnerability ManagementSecurity Operations Center ExperienceSIEMLog AnalysisNetwork SecurityAttack Techniques KnowledgeCompliance ManagementRisk AssessmentPerformance Metrics Reporting
Soft Skills
LeadershipAnalytical SkillsCoachingPerformance ManagementCommunication
Tools & Technologies
Microsoft 365 E5Defender XDRIntunePurviewSentinelTicketing ToolsMDR/MSSP ToolsFirewallsIntrusion Detection SystemsSecure Remote Connectivity
Industry Keywords
PCI DSSSOC 2ISO 27001CybersecurityMaritime Cybersecurity33 CFRThird-Party Risk ManagementSecurity Risk RegisterTabletop ExercisesIdentity and Access Management
Tech Stack
Tools & technologiesCloudCyber SecurityFirewallsIoT
About the role
Key responsibilities & impact- Lead the day-to-day operations of Hornblower’s information security program
- Direct daily security operations, including alert triage, case management and incident response
- Ensure 24x7 monitoring and response through internal staff and the MDR/MSSP provider
- Manage the MDR/MSSP relationship against service levels and performance measures
- Serve as the senior escalation point for the security team, including outside business hours
- Produce KPI and metrics reporting for the CISO and executive leadership
- Lead incident response from detection through recovery and post-incident review
- Conduct tabletop exercises at least annually
- Oversee vulnerability assessment and management, including scanning, patch timelines, remediation tracking and reporting
- Own the security architecture and roadmap across identity, endpoint, email, network and cloud using Microsoft 365 E5
- Direct identity and access management for a large seasonal workforce
- Secure offices, ticket booths, shared kiosks, mobile ticket scanners and tablets, vessels, and IoT/OT systems
- Evaluate the security tool portfolio to reduce overlap and cost
- Lead PCI DSS and SOC 2 programs and support ISO 27001
- Prepare documentation and responses for auditors, assessors and regulators
- Maintain the enterprise security risk register and report risk to leadership and the board
- Manage third-party risk for vendors processing payment and customer data
- Support maritime cybersecurity requirements for passenger vessels under 33 CFR
- Create and maintain security operations procedures and runbooks
- Lead security awareness for a largely seasonal workforce
- Participate in IT and business projects affecting security
Requirements
What you’ll need- Eight or more years of information security experience
- At least three years leading a security team or function at a multi-site organization
- Bachelor's degree in information security, computer science or a related field, or equivalent experience
- Hands-on experience with Microsoft 365 E5 security capabilities, including Entra ID and Conditional Access, Defender XDR, Intune, Purview and Sentinel
- Demonstrated experience managing an MDR or MSSP provider against service levels and measurable outcomes
- Experience operating in a security operations center or 24x7 service environment, including working to SLAs
- Strong knowledge of attack techniques, exploits and vulnerabilities, and experience with SIEM, log analysis and ticketing tools
- Experience owning PCI DSS compliance as a merchant and leading SOC 2 audits, including evidence preparation and work with assessors
- Experience leading incident response, including ransomware, phishing or social engineering incidents
- Working knowledge of network security, including firewalls, intrusion detection and prevention, segmentation and secure remote connectivity
- Strong analytical, leadership, coaching and performance management skills, with the ability to explain risk to non-technical executives
- Willingness to participate in out-of-hours escalation for significant security incidents
Benefits
Comp & perks- 24x7 security monitoring and response coverage
- On-call and escalation schedules
- Participation in security operations and incident response leadership