Director of Information Security

Step into a high-impact leadership role where information security directly shapes business strategy and executive decision-making. This is a unique opportunity to build, elevate, and own an enterprise security program at a time of transformation, visibility, and long-term investment.

Code: 47551

Posted: 2025-12-23

Category: Information Technology

The Director of Information Security is responsible for designing, leading, and sustaining an enterprise-wide information security and risk management program that protects the organization’s data, systems, and operations. This role oversees governance, risk, and compliance initiatives while partnering closely with executive leadership and cross-functional teams to ensure security strategies align with business objectives and regulatory expectations. The position requires a proactive, independent leader with strong technical, regulatory, and people leadership capabilities.

Worksite Location:

Onsite position in St. Paul, MN

Pay Range:

Up to $190K salary + bonus
No work visa sponsorship available; no C2C, thank you

Benefits:

Low-cost medical, dental, and vision insurance
Quarterly bonuses
Generous vacation and sick time hours, paid leave option
6% 401k contribution
Tuition reimbursement

Roles & Responsibilities

Establish and execute a comprehensive information security strategy covering governance, risk, compliance, and cybersecurity operations
Lead enterprise-wide risk identification, assessment, mitigation, and reporting aligned with organizational risk tolerance
Develop, maintain, and enforce information security policies, standards, procedures, and supporting documentation
Provide independent oversight of information security practices separate from day-to-day IT operations
Lead and mentor a team of information security professionals to ensure consistent, high-quality security practices
Chair or co-lead information security and IT governance committees, providing regular reporting to executive leadership
Oversee identity and access management, data protection, loss prevention, and security monitoring capabilities
Direct incident response activities, including investigation, containment, remediation, and post-incident improvement efforts
Manage business continuity, disaster recovery planning, business impact analyses, and testing initiatives
Lead third-party risk management efforts, including vendor security assessments and ongoing monitoring
Coordinate internal and external audits, regulatory examinations, and remediation activities
Collaborate with Legal, Human Resources, Risk, Compliance, Facilities, and IT to align policies and controls
Drive organization-wide security awareness, education, and training programs for employees and leadership
Stay current on emerging threats, regulatory changes, and industry best practices through professional networks and ongoing education
Serve as the organization’s subject matter expert for information security and cybersecurity risk
Contribute to enterprise risk management, strategic planning, and change management initiatives

Required Skills & Experience

8+ years of progressive experience in information security, risk management, or cybersecurity, including 6+ years in a leadership or management role
Expertise in Governance, risk, and compliance (GRC), Third-party/vendor risk management, Business continuity and disaster recovery, Incident response and threat management, Security awareness and training programs
Experience supporting regulated environments, preferably within financial services or similarly regulated industrie
Strong working knowledge of security frameworks and regulatory standards (e.g., NIST, ISO, regulatory guidance
Demonstrated experience building and operating enterprise information security programs
Familiarity with security technologies such as firewalls, VPNs, access controls, and monitoring tools
Ability to assess business risk and apply practical, risk-based security controls
Proven ability to manage multiple initiatives, meet deadlines, and lead cross-functional collaboration
Strong written and verbal communication skills with the ability to influence at executive levels
Bachelor’s degree in information systems, computer science, business, or a related discipline preferred
Industry certifications such as CISSP, CISM, or CISA strongly preferred

About Versique
Versique: /ver-seek/ adj. being both versatile and unique; n. a high-performance recruiting firm specializing in executive leadership search, direct hire, and interim hiring solutions.

Versique Executive, Professional, & Interim Recruiting is a locally owned and operated hiring and placement firm based in the Twin Cities of Minnesota. With specialized practice areas across our three divisions, Versique delivers tailored expertise to a wide range of industries. What sets us apart is our team of recruiters—seasoned professionals who have worked in the very fields they now hire for, providing unmatched industry insight and connections.

We believe people are more than just resumes—they are transformative, unlocking the potential for organizational growth and success.

Versique is proud to be award-winning, earning recognition on the Inc. 5000 list of fastest-growing private companies and the Minneapolis-St. Paul Business Journal's Fast 50 list for 2023. We are also consistently recognized as a Star Tribune Top Workplace and were named a Best Place to Work in 2022 by the Minneapolis/St. Paul Business Journal.

Let’s find your people, together.

Versique is an equal-opportunity employer committed to creating a diverse workforce. We consider all qualified applicants regardless of race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability, or veteran status.

#LI-SF1
#LI-Onsite