Director, Cybersecurity Operations

Overview The Director, Cybersecurity Operations is responsible for leading and evolving the company's cybersecurity operations capabilities to proactively protect enterprise assets, information, and business operations. This role provides strategic and operational leadership across security monitoring and incident response, exposure management, business continuity and disaster recovery, security awareness, and managed security service providers, ensuring cyber risks are effectively identified, managed, and remediated. The Director partners closely with executive leadership, IT, business stakeholders, and external partners to enhance cyber resilience, drive continuous improvement, and deliver a high-performing security operations program aligned with business objectives and risk tolerance. This role will be based out of Irving, Texas. Responsibilities Operational Governance & Managed Services Oversight

Govern the performance, delivery, and continuous improvement of managed security service providers (e.g., MDR, SOC, vulnerability management). Define and enforce service-level agreements (SLAs), key performance indicators (KPIs), and outcome-driven metrics aligned to business risk. Ensure appropriate escalation, incident handling, and reporting processes are in place and operating effectively.

Threat Detection & Response (SOC / CIRT)

Oversee enterprise threat detection, monitoring, and incident response capabilities, including SIEM, EDR, and threat intelligence integration. Ensure readiness and effectiveness of incident response processes, including coordination with crisis management and external partners. Drive maturity in detection engineering, threat hunting, and response orchestration to reduce dwell time and improve response outcomes. Provide executive-level reporting on threat landscape, incident trends, and response effectiveness.

Business Continuity & Disaster Recovery (BC/DR)

Govern cybersecurity alignment with enterprise business continuity and disaster recovery planning. Ensure cyber incident scenarios are integrated into BC/DR plans and regularly tested through exercises. Coordinate with IT and business stakeholders to validate recovery capabilities and resilience objectives.

Exposure Management (Vulnerability Management & Application Security)

Lead the enterprise exposure management program, including vulnerability identification, prioritization, and remediation governance. Oversee application security practices, including secure SDLC integration and application risk assessments. Partner with infrastructure and application owners to ensure timely remediation of identified risks. Drive adoption of continuous threat exposure management (CTEM) principles

Security Awareness & Human Risk Management

Oversee the design and execution of the enterprise security awareness program, including phishing simulations and targeted training. Measure and report on human risk reduction metrics and program effectiveness. Foster a security-aware culture across the organization.

Strategy & Continuous Improvement

Partner with cybersecurity leadership to define and execute the strategic roadmap for cybersecurity operations capabilities. Identify opportunities to enhance automation, AI-driven detection/response, and operational efficiency. Drive continuous improvement initiatives across people, process, and technology dimensions.

Stakeholder Engagement & Leadership

Act as a key liaison between cybersecurity, IT, business units, and external partners. Provide regular briefings to executive leadership on operational risk, program maturity, and performance. Build and lead a high-performing team, including internal staff and service providers.

Qualifications Experience

10+ years of experience in cybersecurity, with a significant focus on security operations and incident response. Proven leadership experience managing global cybersecurity operations teams and/or managed security service