Director, Cybersecurity and IT Support

Description

The Director, Cybersecurity and IT Support is responsible for leading the execution of the company's cybersecurity technology roadmap while managing global IT support operations across our Shared Services organization.

Working in close partnership with our fractional Chief Information Security Officer (CISO), this role translates cybersecurity strategy into operational execution by leading security technology implementations, coordinating cross-functional initiatives, and ensuring ongoing operational excellence. In parallel, the role is accountable for delivering high-quality IT support services to employees worldwide through the Shared Services organization.

This position combines program management, technical leadership, vendor management, and people leadership to ensure that both cybersecurity initiatives and day-to-day IT operations support the company's business objectives.

Key Responsibilities

Cybersecurity Program Execution

• Partner with the fractional CISO to execute the company's cybersecurity roadmap and strategic initiatives.
• Lead implementation of cybersecurity technologies, including planning, coordination, testing, deployment, and operational transition.
• Manage cybersecurity projects (led by the Fractional CISO) from initiation through completion, ensuring delivery on scope, schedule, budget, and expected outcomes.
• Coordinate activities across IT, Infrastructure, Business Systems, Engineering, HR, Legal, Compliance, and business stakeholders.
• Support the Fractional CISO in tracking cybersecurity maturity initiatives, risks, dependencies, and key milestones.
• Develop and maintain project plans, implementation documentation, and executive status reporting.
• Coordinate and manage relationships with third-party security vendors, consultants, and implementation partners.
• Including day-to-day relationship owner with MSSP, including coordinating response to cybersecurity incidents.
• Ensure newly implemented security controls are successfully transitioned into ongoing operations.
• Support security audits, risk assessments, penetration testing, remediation efforts, and compliance initiatives.
• Provide Cybersecurity KPI data to the Fractional CISO for governance processes.
• Principal North America security engineer for Microsoft 365, AWS, SaaS and Network Infrastructure. Working closely with EMEA counterparts.
• Manage the Security Awareness Training and Testing solution.

Global IT Operations

• Lead the global IT Support function serving employees across all company locations.
• Establish and monitor service levels, response times, customer satisfaction metrics, and operational KPIs.
• Drive continual improvement of IT service delivery processes and end-user experience.
• Oversee incident management, problem management, escalation processes, and root cause analysis.
• Ensure reliable provisioning and lifecycle management of end-user devices, software, and collaboration technologies.
• Manage endpoint management processes, identity-related operational support, and standard workplace technology.
• Develop standardized global support processes while accommodating regional business requirements.
• Partner with Infrastructure, Enterprise Applications, HR, and business leaders to improve technology services.

Vendor & Technology Management

• Manage relationships with managed service providers and technology vendors.
• Monitor vendor performance against SLAs and contractual commitments.
• Participate in technology evaluations and implementation planning.
• Manage operational budgets associated with IT support and cybersecurity initiatives.
• Identify opportunities to improve efficiency through automation and technology modernization.

Leadership & Collaboration

• Lead, coach, and develop members of the global Cybersecurity and IT Support teams.
• Foster a customer-focused, service-oriented culture.
• Build strong partnerships across business functions and technology teams.
• Communicate initiative status, operational performance, and risks to leadership.
• Serve as the operational liaison between the fractional CISO, internal IT teams, and business stakeholders.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field (or equivalent experience).
• 7+ years of progressive IT experience.
• 3+ years leading IT operations, service delivery, or technical teams.
• Experience managing enterprise technology projects or programs.
• Experience implementing cybersecurity technologies or security improvement initiatives.
• Experience managing third-party vendors and managed service providers.
• Strong understanding of IT infrastructure, endpoint management, identity and access management, Microsoft 365, cloud technologies, networking fundamentals, and enterprise applications.
• Experience with IT Service Management (ITSM) practices and platforms.
• Excellent project management, organizational, and communication skills.

Preferred

• Experience working with a virtual or fractional CISO.
• Experience in global or multinational organizations.
• Knowledge of cybersecurity frameworks such as NIST CSF, CIS Controls, ISO 27001, or SOC 2.
• Experience supporting security audits and compliance programs.

Success Measures

Success In This Role Will Be Measured By

• Successful delivery of cybersecurity technology initiatives on time and within budget.
• Improvement in the organization's cybersecurity maturity.
• Achievement of IT support service level objectives.
• High employee satisfaction with IT services.
• Reduction in recurring operational issues and security risks.
• Effective vendor performance and cost management.
• Successful partnership with the fractional CISO and business leadership.
• Continuous improvement in operational efficiency and service quality.

Equal Employment Opportunity at Beauty Industry Group

At Beauty Industry Group, we are proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all team members.

We consider all qualified applicants for employment without regard to race, color, religion, sex, pregnancy, national origin, age, sexual orientation, gender identity or expression, disability, genetic information, protected veteran status, or any other legally protected characteristic.