Director of Cyber Security
Director of Cyber Security
Direct Hire
5-days per Week Onsite - Audubon, PA 19403
Our client, a Medical Device Company, is seeking an experienced, strategic and forward-thinking Director of Cyber Security to join their growing organization.
This position is a Direct Hire opportunity and is fully ONSITE in Norristown, PA.
Position Summary
The Director of Cybersecurity will lead and mature our cybersecurity program. They will oversee enterprise IT initiatives in Governance, Risk & Compliance (GRC), Security Operations, Cloud Security, Identity & Access Management (IAM), and Data Security. This leader will apply strategic insight to protect physical and digital assets, intellectual property, and patient information across hybrid IT environments.
Essential Functions
- Maintain a comprehensive cybersecurity program aligned with business priorities, regulatory requirements, and risk management goals
- Lead enterprise IT GRC efforts, including risk assessments, policy and procedure development, internal/external audits, and regulatory readiness (e.g., HIPAA, SOX, GDPR, ISO 27001, NIST).
- Oversee security operations, including incident response, threat detection, security monitoring, and vulnerability management.
- Drive a robust IT cloud security program to protect workloads, data, and access across IaaS, PaaS, and SaaS environments.
- Manage and continuously improve the IAM program, with emphasis on lifecycle management and RBAC for both workforce and third-party users.
- Establish data security controls and policies to protect sensitive data and corporate information.
- Collaborate with internal stakeholders (e.g., PD, QA, Legal, HR, IT) to embed security by design across digital platforms and business processes.
- Lead security architecture decisions, evaluate technologies, and oversee vendor partnerships to ensure optimal protection and compliance.
- Educate employees and executives through security awareness and training programs.
- Deliver executive-level reporting on security posture, risk metrics, and remediation progress.
- Recruit, lead, and mentor a skilled cybersecurity team.
- Adheres to the letter and spirit of the company Code of Conduct, the AdvaMed Code, MedTech Code, and all other company policies.
- Ensures Compliance with applicable governmental laws, rules, and regulations, both in the United States and internationally, by completing introductory and annual training and maintaining knowledge of compliance as it applies to your role
- Represents the company in a professional manner and uphold the highest standards of ethical business practices and socially responsible conduct in all interactions with other employees, customers, suppliers, and other third parties.
Qualifications
- Minimum of a Bachelor s degree in Information Security, Computer Science, or related discipline. Equivalent of experience and industry leading certification will also be considered.
- 10+ years of experience in cybersecurity, with 5+ of those years in a leadership role.
- Expertise in cloud security architectures, controls, and compliance
- Strong background in GRC, security operations, data loss prevention (DLP), and IAM
- Deep understanding of relevant regulations and standards: SOX & ISO 27001.
- Hands-on experience leading risk assessments and implementing enterprise IT controls.
- Industry-recognized certifications strongly preferred (e.g., CISSP, CISM, CCSP, CRISC).
- Proven ability to lead cross-functional teams and communicate security priorities clearly to technical and non-technical audiences.
Physical Demands
The physical demands listed here are representative of those that must be met by and employee to successfully perform the essential functions of this job.
- Required to sit; climb or balance; and stoop, kneel, crouch or crawl
- Required to regularly lift and/or move up to 10 pounds, and occasionally lift and/or move up to 25 pounds
- Required to possess specific visons abilities, including: close vision, distance vision, color vision, peripheral vision, depth perception and capacity to adjust focus.
Director of Cyber Security
Direct Hire
5-days per Week Onsite - Audubon, PA 19403
Our client, a Medical Device Company, is seeking an experienced, strategic and forward-thinking Director of Cyber Security to join their growing organization.
This position is a Direct Hire opportunity and is fully ONSITE in Norristown, PA.
Position Summary
The Director of Cybersecurity will lead and mature our cybersecurity program. They will oversee enterprise IT initiatives in Governance, Risk & Compliance (GRC), Security Operations, Cloud Security, Identity & Access Management (IAM), and Data Security. This leader will apply strategic insight to protect physical and digital assets, intellectual property, and patient information across hybrid IT environments.
Essential Functions
- Maintain a comprehensive cybersecurity program aligned with business priorities, regulatory requirements, and risk management goals
- Lead enterprise IT GRC efforts, including risk assessments, policy and procedure development, internal/external audits, and regulatory readiness (e.g., HIPAA, SOX, GDPR, ISO 27001, NIST).
- Oversee security operations, including incident response, threat detection, security monitoring, and vulnerability management.
- Drive a robust IT cloud security program to protect workloads, data, and access across IaaS, PaaS, and SaaS environments.
- Manage and continuously improve the IAM program, with emphasis on lifecycle management and RBAC for both workforce and third-party users.
- Establish data security controls and policies to protect sensitive data and corporate information.
- Collaborate with internal stakeholders (e.g., PD, QA, Legal, HR, IT) to embed security by design across digital platforms and business processes.
- Lead security architecture decisions, evaluate technologies, and oversee vendor partnerships to ensure optimal protection and compliance.
- Educate employees and executives through security awareness and training programs.
- Deliver executive-level reporting on security posture, risk metrics, and remediation progress.
- Recruit, lead, and mentor a skilled cybersecurity team.
- Adheres to the letter and spirit of the company Code of Conduct, the AdvaMed Code, MedTech Code, and all other company policies.
- Ensures Compliance with applicable governmental laws, rules, and regulations, both in the United States and internationally, by completing introductory and annual training and maintaining knowledge of compliance as it applies to your role
- Represents the company in a professional manner and uphold the highest standards of ethical business practices and socially responsible conduct in all interactions with other employees, customers, suppliers, and other third parties.
Qualifications
- Minimum of a Bachelor s degree in Information Security, Computer Science, or related discipline. Equivalent of experience and industry leading certification will also be considered.
- 10+ years of experience in cybersecurity, with 5+ of those years in a leadership role.
- Expertise in cloud security architectures, controls, and compliance
- Strong background in GRC, security operations, data loss prevention (DLP), and IAM
- Deep understanding of relevant regulations and standards: SOX & ISO 27001.
- Hands-on experience leading risk assessments and implementing enterprise IT controls.
- Industry-recognized certifications strongly preferred (e.g., CISSP, CISM, CCSP, CRISC).
- Proven ability to lead cross-functional teams and communicate security priorities clearly to technical and non-technical audiences.
Physical Demands
The physical demands listed here are representative of those that must be met by and employee to successfully perform the essential functions of this job.
- Required to sit; climb or balance; and stoop, kneel, crouch or crawl
- Required to regularly lift and/or move up to 10 pounds, and occasionally lift and/or move up to 25 pounds
- Required to possess specific visons abilities, including: close vision, distance vision, color vision, peripheral vision, depth perception and capacity to adjust focus.