Senior Director – Cyber Security

🔥 1 minute ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• No salary listed.

Apply Now

Find Similar Remote Jobs

Hornblower Group

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

🚗 Transport

✈️ Travel

🏨 Hospitality

💰 $146.9k Seed on 2021-11

Transport • Travel • Hospitality

Hornblower Group is a global leader in maritime transportation and sightseeing. The company operates a portfolio of ferry, cruise and attraction brands — including City Ferry, City Cruises, Niagara City Cruises, Statue City Cruises, and Alcatraz City Cruises — and serves over 20 million guests annually. Headquartered in Orlando with offices in multiple U. S. and international cities, Hornblower owns and operates 250+ vessels and provides dining, events, ferry transportation, and curated onshore and waterfront experiences through both owned brands and partnerships with entities such as the National Park Service and Niagara Parks.

📋 Description

• Lead the day-to-day operations of Hornblower’s information security program • Direct daily security operations, including alert triage, case management and incident response • Ensure 24x7 monitoring and response through internal staff and the MDR/MSSP provider • Manage the MDR/MSSP relationship against service levels and performance measures • Serve as the senior escalation point for the security team, including outside business hours • Produce KPI and metrics reporting for the CISO and executive leadership • Lead incident response from detection through recovery and post-incident review • Conduct tabletop exercises at least annually • Oversee vulnerability assessment and management, including scanning, patch timelines, remediation tracking and reporting • Own the security architecture and roadmap across identity, endpoint, email, network and cloud using Microsoft 365 E5 • Direct identity and access management for a large seasonal workforce • Secure offices, ticket booths, shared kiosks, mobile ticket scanners and tablets, vessels, and IoT/OT systems • Evaluate the security tool portfolio to reduce overlap and cost • Lead PCI DSS and SOC 2 programs and support ISO 27001 • Prepare documentation and responses for auditors, assessors and regulators • Maintain the enterprise security risk register and report risk to leadership and the board • Manage third-party risk for vendors processing payment and customer data • Support maritime cybersecurity requirements for passenger vessels under 33 CFR • Create and maintain security operations procedures and runbooks • Lead security awareness for a largely seasonal workforce • Participate in IT and business projects affecting security

🎯 Requirements

• Eight or more years of information security experience • At least three years leading a security team or function at a multi-site organization • Bachelor's degree in information security, computer science or a related field, or equivalent experience • Hands-on experience with Microsoft 365 E5 security capabilities, including Entra ID and Conditional Access, Defender XDR, Intune, Purview and Sentinel • Demonstrated experience managing an MDR or MSSP provider against service levels and measurable outcomes • Experience operating in a security operations center or 24x7 service environment, including working to SLAs • Strong knowledge of attack techniques, exploits and vulnerabilities, and experience with SIEM, log analysis and ticketing tools • Experience owning PCI DSS compliance as a merchant and leading SOC 2 audits, including evidence preparation and work with assessors • Experience leading incident response, including ransomware, phishing or social engineering incidents • Working knowledge of network security, including firewalls, intrusion detection and prevention, segmentation and secure remote connectivity • Strong analytical, leadership, coaching and performance management skills, with the ability to explain risk to non-technical executives • Willingness to participate in out-of-hours escalation for significant security incidents

🏖️ Benefits

• 24x7 security monitoring and response coverage • On-call and escalation schedules • Participation in security operations and incident response leadership

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume