Director of IT Security (Remote)

About the role

Directive Consulting is seeking a senior leader to own and evolve its information security program. Reporting to the Head of Finance, you will protect a fully remote workforce across North America and the United Kingdom while embedding security into every business decision.

Key responsibilities

• Develop and execute a company‑wide cybersecurity strategy and roadmap.
• Define, maintain, and enforce enterprise security policies, standards, and governance frameworks.
• Conduct ongoing risk assessments, maintain a risk register, and drive remediation prioritisation.
• Lead vulnerability management, third‑party vendor security assessments, and vendor risk management.
• Configure data‑governance policies across tools such as Notion, Google Drive, and Stratos.
• Manage device security using MDM solutions (Kandji) and enforce MFA, privileged access controls, and endpoint protection.
• Own the incident response program, including playbooks, tabletop exercises, and post‑incident reviews.
• Collaborate with senior leadership and the Senior IT Manager to implement technical controls and monitor security health.

Required profile

• Proven experience leading information security programs at the director or equivalent senior level.
• Strong understanding of risk management, governance, and compliance in a distributed, remote environment.
• Excellent communication skills to present risks, metrics, and recommendations to executive leadership.
• Ability to work cross‑functionally with finance, operations, and technology teams.

Required skills

• Kandji (MDM platform)
• Mobile Device Management (MDM)
• Notion
• Google Drive
• Stratos
• Multi‑Factor Authentication (MFA)
• Vulnerability management
• Incident response planning