Title:  Director, Information Security

About Us

Data Analysis Incorporated (DAI) is the controlling entity of the O’Neil family of businesses. DAI and its subsidiaries operate in diverse industries worldwide, including global equity markets, health care, financial services, digital news, and insurance. Our global footprint allows our teams to be responsive to customer needs in a timely and efficient manner. We are dedicated to using technology and innovation to bring change and growth to our businesses. We believe in a dynamic workplace, creating engaging, informative products and services that help our customers succeed. Integrity is an essential characteristic for our firms and our associates; if this describes you, please apply! 
 

Summary

The Director Information Security, Operations, and Architecture provides strategic leadership and technical direction for the design, implementation, and operation of a secure cloud environments across AWS, Azure, and hybrid infrastructures. This role is accountable for ensuring that enterprise systems and cloud services meet the organization’s security, compliance, and resiliency requirements. The Director leads a multidisciplinary team responsible for cybersecurity architecture, engineering, operations, and automation—enabling secure innovation and protecting sensitive information assets across the enterprise.
 

Duties and Responsibilities

Strategic Leadership & Architecture

• Define and lead the cybersecurity strategy across AWS, Azure, and on-premises environments.
• Develop and maintain the enterprise security architecture framework, ensuring alignment with business objectives, compliance standards, and cloud best practices.
• Partner with Infrastructure, DevOps, and Application teams to embed security-by-design principles throughout the technology lifecycle.

Engineering & Operations

• Oversee the design, deployment, and continuous improvement of security controls, tooling, and automation within cloud and hybrid ecosystems.
• Experience in building an internal SOC leveraging managed services
• Direct cybersecurity operations, including monitoring, incident response, and vulnerability management, ensuring rapid detection and remediation of threats.
• Implement scalable identity and access management (IAM) frameworks across AWS, Azure AD, and enterprise SSO platforms.

Governance, Risk, and Compliance

• Ensure alignment with regulatory and compliance frameworks (e.g., ISO 27001, SOC 2, HIPAA, NIST 800-53, and CIS benchmarks).
• Collaborate with compliance teams to maintain continuous evidence collection and automated policy enforcement.

Technology Enablement & Innovation

• Lead initiatives in cloud-native security (CSPM, CWPP, CNAPP), zero trust architecture, and security automation.
• Evaluate emerging technologies, tools, and partners that advance the organization's cyber defense capabilities.
• Partner with DevSecOps to ensure security automation across the CI/CD pipeline.

Leadership & Collaboration

• Build and develop high-performing teams of cybersecurity engineers, architects, and analysts.
• Proficient at building and managing offshore teams
• Partner with enterprise and application architects to integrate security patterns into design standards.
• Drive security awareness and operational excellence across IT and engineering divisions.

Operational Oversight

• Oversee SOC operations (either Internal or MSSP) and collaborate with external partners for managed detection and response (MDR) services.
• Manage security toolsets, including SIEM, EDR/XDR, SOAR, vulnerability scanning, and key management systems.
   

Qualifications & Requirements

Required Education, Experience, Certification/Licensure

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience
• Minimum 10+ years of progressive experience in cybersecurity engineering, operations, or architecture, with 5+ years in a leadership capacity.
• Proven experience securing and operating AWS and Azure environments at enterprise scale.
• Deep understanding of network security, cloud-native services, identity governance, and infrastructure-as-code (IaC).
• Demonstrated success leading teams in hybrid cloud or multi-cloud security programs.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs)

• Expert understanding of AWS and Azure cloud security architectures and shared responsibility models.
• Strong leadership and mentoring skills with a proven ability to develop technical talent.
• Excellent communication skills—able to translate complex security concepts into clear business language.
• Proficient in automation frameworks (Terraform) and DevSecOps pipelines.
• Ability to manage competing priorities and deliver secure, scalable solutions under pressure.
• Commitment to continuous improvement, innovation, and operational excellence.
• Tool Familiarity:  MS Sentinel, Defender Suite of Products, AWS Security Products, WIZ, Palo Alto, Tenable, Qualys, Varonis, Obsidian

Working Conditions

Must be able to perform essential job duties.  Work is performed primarily in an office environment. Typically requires the ability to sit for extended periods of time (66%+ each workday), hear the telephone, and enter data on a computer and may also require the ability to lift up to 10 pounds.  

Equal Opportunity Employer

Data Analysis Inc is an equal opportunity employer. All aspects of employment, including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.