Director, IT Security & Controls

Director of Information Security & IT ControlsNorthern Detroit SuburbsPosition OverviewA well-established organization is seeking an experienced Director of Information Security & IT Controls to lead its enterprise security, technology risk, and IT controls programs.This individual will be responsible for developing and advancing the organization's information security strategy while ensuring appropriate controls are in place to protect systems, data, business operations, and other critical technology assets.The role combines cybersecurity leadership, IT risk, regulatory compliance, identity and access management, security operations, and technology controls. It is well suited for a security leader who can operate strategically while remaining closely connected to execution.A major focus of the position will be maintaining a strong control environment within a regulated corporate setting, including oversight of technology controls supporting financial reporting requirements.Key ResponsibilitiesDevelop and execute the organization's enterprise information security and technology risk strategy.Provide leadership across cybersecurity operations, security architecture, technology controls, and incident preparedness and response.Oversee IT general controls and application controls supporting regulatory and financial compliance requirements.Maintain an effective technology control environment and ensure controls remain documented, tested, and prepared for internal and external review.Lead identity and access management initiatives, including privileged-access security and identity governance.Oversee vulnerability management, endpoint protection, application security, and related security processes.Direct technology governance, risk, and compliance activities.Maintain programs covering third-party technology risk, security awareness, regulatory compliance, and security policy.Establish meaningful security and risk metrics and communicate technology risk to executive leadership.Partner with internal stakeholders on audit preparation, control testing, remediation activities, and technology-risk initiatives.Coordinate with external audit and other appropriate third parties on technology controls and security matters.Work closely with infrastructure, applications, engineering, and business teams to incorporate appropriate security and controls into technology initiatives.Recruit, develop, and retain a high-performing information security and controls team.Participate in enterprise technology planning, architecture, and leadership discussions.Continuously evaluate the organization's security posture and identify opportunities to strengthen security capabilities and reduce business risk.Required QualificationsBachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.Approximately 10+ years of progressive experience in information security, technology risk, IT controls, or related areas.Significant experience leading cybersecurity, technology risk, or controls teams.Experience operating within a complex corporate environment with formal audit and compliance requirements.Strong understanding of IT general controls, application controls, and technology controls supporting financial reporting.Hands-on leadership experience with control design, testing, remediation, and audit support.Strong knowledge of identity and access management, cybersecurity operations, vulnerability management, and security governance.Experience communicating cybersecurity and technology risk to senior executives.Professional security or risk certification such as CISSP, CISM, CISA, or a comparable credential.Demonstrated ability to build, mentor, and lead security and technology-risk professionals.Preferred BackgroundAdvanced degree in cybersecurity, information systems, business, or a related discipline.Previous experience in a senior enterprise cybersecurity or technology-risk leadership position.Experience developing or enhancing privileged-access management and identity-governance capabilities.Experience supporting cybersecurity and technology controls through periods of organizational or technology change.Familiarity with integrating new business operations, systems, or environments into an established security and controls framework.Experience working closely with internal audit, finance, legal, compliance, and executive leadership.Key CompetenciesSecurity Leadership - Ability to translate business objectives into an effective enterprise cybersecurity strategy.Technology Risk & Controls - Strong understanding of how cybersecurity, IT controls, governance, compliance, and financial controls intersect.Executive Communication - Ability to explain technical risks, exposures, and mitigation strategies in clear business terms for senior leadership.Security Operations - Demonstrated ability to oversee incident response, vulnerabilities, endpoint protection, access management, and other operational security disciplines.Identity & Access Management - Strong understanding of enterprise identity security, privileged access, authentication, authorization, and identity governance.Audit & Compliance - Comfort working within structured audit environments and partnering with internal and external stakeholders on control effectiveness.Third-Party Risk - Experience evaluating security risks involving technology vendors, service providers, and other external partners.Team Leadership - Proven ability to develop security professionals and build effective teams across multiple cybersecurity and risk disciplines.The OpportunityThis is an opportunity to take ownership of a highly visible enterprise security and technology-controls function within an established organization.The successful candidate will have the ability to influence cybersecurity strategy, strengthen the organization's control environment, mature identity and access management capabilities, improve the measurement of technology risk, and build a security program that effectively supports the broader business.The position requires a leader who can balance security, compliance, business enablement, and operational execution while effectively partnering with both technical and executive stakeholders.Equal Opportunity Employer/Veterans/DisabledTo read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://www.lhh.com/us/en/candidate-privacyThe Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

• The California Fair Chance Act
• Los Angeles City Fair Chance Ordinance
• Los Angeles County Fair Chance Ordinance for Employers
• San Francisco Fair Chance Ordinance