Security Director

Key Responsibilities

• Identity Access Management

  : Oversee IAM strategy and operations (Okta SSO, MFA, conditional access, lifecycle governance).

• Endpoint Asset Security

  : Ensure managed devices meet Banyan s zero-trust standards (EDR/XDR, encryption, patching).

• Monitoring Detection

  : Manage logging, SIEM/MDR integration, and threat detection for HQ systems.

• Vulnerability Management

  : Establish scanning, remediation, and reporting processes for HQ infrastructure and SaaS tools.

• Data Protection Governance

  : Partner with IT to enforce DLP, backup, and data classification policies.

• Lead

  HQ s incident response program

  , ensuring readiness through playbooks, simulations, and training.

• Coordinate portfolio-wide incident response

  : align playbooks, facilitate cross-OpCo exercises, and provide escalation pathways during major events.
• Work with

  Corporate Risk

  to maintain effective cybersecurity insurance, ensuring coverage is informed by real risk and incident data.
• Serve as point of contact for regulators, auditors, and insurers on HQ security matters.
  

• Act as a

  regional cybersecurity advisor

  to OpCos, providing guidance on risk, compliance, and best practices.
• Support diligence and integration during acquisitions, rapidly assessing OpCo security posture and risks.
  
• Provide frameworks, playbooks, and optional shared services (e.g., MDR, security training, vendor reviews) that OpCos can adopt.
  
• Share learnings and coordinate with other Security Directors to improve global practices.
  

• Contribute to Banyan s

  enterprise-wide security strategy

  , aligned with our

  cloud-first, zero-trust, no-footprint

  architecture.
• Quantify and communicate the value of cybersecurity initiatives to HQ and OpCos.
  
• Promote a

  secure-by-default culture

  , ensuring security is embedded in daily operations and decision-making.
• Partner with the Head of IT and peer Directors to build a

  cohesive, global security function

  .

Requirements

• Bachelor s degree plus 6+ years of progressive experience in

  cybersecurity leadership

  , ideally in SaaS, MA-driven, or federated organizations.
• Proven success in

  core cybersecurity functions

  : IAM, endpoint protection, monitoring/response, vulnerability management, and data protection.
• Experience

  leading incident response programs

  and coordinating responses across multiple business units.
• Familiarity with

  cybersecurity insurance, regulatory frameworks, and compliance obligations

  (SOC2, GDPR, HIPAA, etc.).
• Experience advising diverse business units or OpCos on cybersecurity risk management.
  
• Strong communicator with ability to explain risk in business terms and build trust with executive and OpCo leadership.
  
• Experience supporting

  MA diligence and integration

  is strongly preferred.
• Collaborative, resilient, and able to thrive in a

  fast-paced, decentralized environment

  .