Director of Cybersecurity & Compliance

Supervisory Duties: None

Core Responsibilities: Security Standards & Baseline Enforcement Define, document, and continually improve Spinen's baseline security standards Support the implementation and ongoing maintenance of CIS Controls across client environments Design and maintain layered security and compliance standards for clients with advanced regulatory requirements Research, evaluate, and recommend security technologies, tools, and best practices Partner with Pod leadership to standardize security solutions and processes Ensure security standards are implemented consistently and efficiently across environments Client Environment Oversight & Remediation Conduct proactive security assessments to identify risks, vulnerabilities, and control gaps Develop actionable remediation plans and work with Pods and clients to execute them Engage directly with clients to explain security risks, required controls, and recommended improvements Serve as a trusted advisor to client leadership teams regarding security strategy and risk reduction Track security posture improvements and help clients achieve measurable security outcomes Compliance Program Support Assist clients with compliance and security framework alignment, including CIS Controls, SOC 2, CMMC, NIST, and similar standards Support the development, maintenance, and improvement of security policies, procedures, and documentation Identify compliance gaps and coordinate remediation efforts with internal and client stakeholders Maintain awareness of emerging compliance requirements and industry best practices Assist with client audits, assessments, and security reviews as needed Security Operations & Incident Response Participate in security incident investigations and response activities Coordinate with Pods, vendors, and clients during security events Assist in identifying root causes and implementing corrective actions Contribute to the continuous improvement of incident response processes and security monitoring capabilities Help ensure lessons learned are documented and incorporated into future security practices Client Communication & Security Consulting Present security findings, recommendations, and risk assessments to technical and non-technical audiences Build trusted relationships with clients through proactive communication and consultative guidance Translate technical security concepts into practical business discussions Support client strategic planning initiatives related to cybersecurity and compliance Partner with Solution Managers and Pod leadership to align security recommendations with business objectives Continuous Improvement & Innovation Identify opportunities to automate repetitive security and compliance activities Evaluate new technologies and approaches that improve security outcomes Contribute to the development and enhancement of Spinen's security service offerings Promote security awareness and best practices throughout the organization Participate in ongoing professional development and certification efforts Required Skills & AbilitiesStrong understanding of cybersecurity principles, risk management, and security operations Working knowledge of security frameworks and controls such as CIS Controls, SOC 2, CMMC, NIST, or similar standards Ability to identify risks and develop practical remediation strategies Strong communication skills with the ability to explain technical concepts to non-technical audiences Experience building relationships and influencing outcomes without direct authority Strong analytical, organizational, and problem-solving skills Ability to manage multiple priorities across multiple client environments Commitment to continuous learning and professional growth Proficiency with Microsoft Office and common business technologies

Education & Experience: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience 3-5 years of experience in cybersecurity, compliance, IT operations, or managed services MSP, MSSP, consulting, or multi-client environment experience strongly preferred Experience participating in security assessments, remediation efforts, incident response, or compliance initiatives Industry certifications such as CISSP, CISM, CEH, Security+, SC-200, SC-100, or equivalent certifications are a plus

Physical Requirements: Prolonged periods of sitting and working on a computer Ability to lift up to 50 lbs. as needed May be required to work outside normal business hours during security incidents or client emergencies