{"id":1619149,"url":"https://alion.io/job/carhartt-sr-director-cybersecurity","title":"Sr. Director, Cybersecurity","company":{"id":1758705,"name":"Carhartt","domain":"carhartt.com","url":"https://alion.io/company/carhartt-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":{"grade":"A","score":90,"open_postings":10,"ghost_share":0,"stale_share":0.4,"repost_share":0,"time_to_fill_p50_days":50,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dearborn, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":129000,"max_usd":263000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":177},"experience_years_min":15,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"ITIL","optional":false}],"status":"live","first_seen_at":"2026-09-15T04:00:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-20T17:49:57Z","board_verified":true,"closed_at":null,"days_open":35,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":35},"description":"Position Details: \nTitle: Sr. Director, Cybersecurity\nDepartment: Information Technology\nReports to: VP, IT Infrastructure and Security\nLocation: Dearborn\nJob Classification: Remote\nFLSA Status: Exempt\nJob Band: Executive\nJob Summary \nThe Senior Director of Cybersecurity is the enterprise leader accountable for the strategy, governance, operational effectiveness, and continual maturation of the cybersecurity program. The role leads four integrated capabilities: Security Engineering, Security Operations, Identity and Access Management, and Governance, Risk, and Compliance. This leader protects the confidentiality, integrity, and availability of information assets while enabling business objectives through risk-informed decision-making, resilient security architecture, effective operations, and clear accountability.The position partners closely with the enterprise risk function to translate cyber threats, control gaps, and technology dependencies into business-oriented risk statements, scenarios, and reporting that can be aggregated into the overall enterprise risk program. The role regularly advises senior executives and business leaders, establishes investment priorities, and provides concise reporting on cyber risk exposure, program performance, resilience, and remediation progress.\nInspired by Hard Work\nAt Carhartt, the values of hard work—dependability, honesty, and trust—are rooted in the legacy of our founder, Hamilton Carhartt. His commitment to serving hardworking people continues to inspire everything we do. Guided by his legacy and our mission—We serve and protect all hardworking people by building durable products—we remain dedicated to upholding these principles in every decision we make and every product we create.\nAssociate Responsibilities\nOwn and execute a multi-year enterprise cybersecurity strategy and roadmap aligned with business priorities, risk appetite, technology strategy, and regulatory obligations.\nLead, coach, and develop leaders and teams across the four cybersecurity functions; establish clear decision rights, succession plans, talent pipelines, operating rhythms, and measurable performance expectations.\nAdvise executive leadership on material cyber risks, emerging threats, major incidents, strategic tradeoffs, and investment needs using clear business and financial context.\nOwn the cybersecurity operating model, annual planning, budget, workforce strategy, sourcing model, vendor portfolio, and prioritization of capabilities and initiatives.\nEstablish program-level objectives, key risk indicators, key performance indicators, maturity targets, and executive reporting that demonstrate risk reduction and operational outcomes.\nBuild strong partnerships across Information Technology, Enterprise Risk, Legal, Privacy, Internal Audit, Compliance, Human Resources, Finance, Supply Chain, and business functions.\nDefine and maintain the enterprise cybersecurity strategy, target-state capabilities, policy architecture, control framework, and prioritized roadmap.\nProvide strategic direction for enterprise security architecture and security-by-design practices across cloud, on-premise, applications, infrastructure, data, and third-party services.\nPresent cyber risk posture, incidents, trends, program performance, and investment recommendations to senior leadership and appropriate governance bodies.\nLead annual and long-range planning, including budget development, capital and operating forecasts, resource allocation, sourcing decisions, and benefits realization.\nOversee major cybersecurity transformation initiatives and ensure dependencies, risks, milestones, and outcomes are actively managed.\nMaintain external awareness of threat, regulatory, technology, and industry developments; translate relevant changes into program priorities.\nEstablish a threat-informed operating model with clear severity criteria, escalation paths, service levels, playbooks, evidence requirements, and communication protocols.\nDirect response to significant cybersecurity incidents, coordinating containment, eradication, recovery, executive communications, legal and privacy engagement, and lessons learned.\nSponsor exercises and simulations that validate incident response, crisis management, business continuity dependencies, and executive decision-making.\nLead cybersecurity governance, policy and standards, risk assessment, compliance, control assurance, third-party cyber risk, awareness, exception management, and audit coordination.\nMaintain an enterprise cyber risk taxonomy and consistent methods for identifying, assessing, documenting, treating, accepting, monitoring, and escalating cyber risks.\nOversee compliance with applicable legal, regulatory, contractual, and industry requirements and align the control environment to recognized cybersecurity frameworks.\nCoordinate independent assessments, audits, remediation plans, risk acceptances, and evidence quality; ensure accountable owners and sustainable closure of findings.\nDrive role-based cybersecurity awareness and behavior-change programs in partnership with business and enabling functions.\nPartner with the enterprise risk function to integrate cyber risk into the enterprise risk management framework, governance cadence, risk register, and executive reporting.\nTranslate technical findings and threat conditions into business risk scenarios that describe affected objectives, plausible impacts, likelihood considerations, control effectiveness, dependencies, and treatment options.\nCalibrate cyber risk ratings and escalation thresholds with enterprise risk criteria so cyber risks can be consistently compared, aggregated, and prioritized alongside other enterprise risks.\nProvide timely inputs for enterprise risk assessments and reporting, including material changes in exposure, emerging risks, concentration risks, systemic dependencies, remediation commitments, and accepted residual risk.\nFacilitate risk ownership decisions with business and technology executives and ensure material risk acceptance is documented at the appropriate level of authority.\nCollaborate on risk appetite and tolerance statements, scenario analysis, executive exercises, and risk-informed investment planning.\nSet clear objectives and conduct regular operating reviews across services, incidents, risks, controls, projects, vendors, budgets, and talent.\nOversee strategic vendors, managed services, consultants, and technology partners, including service quality, contractual performance, concentration risk, and value realization.\nDefine and test continuity plans for critical cybersecurity services and leadership coverage.\nRepresent the cybersecurity function in enterprise planning, major technology decisions, and other strategic initiatives as needed.\n\nRequired Education\nBachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, Business, Risk Management, or a related field, or equivalent combination of education and relevant experience. \nMaster's degree in Cybersecurity, Information Systems, Business Administration, Risk Management, or a related discipline preferred. \nOne or more relevant professional certifications preferred, such as CISSP, CISM, CISA, CRISC, CGEIT, or comparable security, risk, audit, cloud, or architecture credentials. \nRequired Skills & Experience\nMinimum of 15 years of progressively responsible experience across cybersecurity, information technology, technology risk, or related disciplines. \nMinimum of 8 years of people leadership experience, including leadership of managers or multiple cybersecurity functions in a complex enterprise environment. \nDemonstrated experience leading or providing executive oversight across Security Engineering, Security Operations, Identity and Access Management, and GRC. \nProven success developing and executing enterprise cybersecurity strategies, roadmaps, operating models, and multi-year transformation programs. \nExperience advising senior executives and governance bodies on cyber risk, incident response, program performance, and investment priorities. \nExperience integrating cyber risk reporting with enterprise risk management, including risk taxonomy, scenario development, aggregation, appetite or tolerance, escalation, and executive reporting. \nDeep working knowledge of recognized cybersecurity and technology governance frameworks, such as NIST, ISO/IEC 27001, COBIT, CIS Controls, and ITIL. \nDemonstrated experience with security architecture, cloud and infrastructure security, security operations, incident response, vulnerability management, threat intelligence, IAM, third-party risk, compliance, audit, privacy, and resilience concepts. \nExperience managing substantial operating and capital budgets, strategic suppliers, managed services, and cross-functional portfolios. \nExceptional business acumen, executive presence, written communication, presentation, negotiation, and influence skills. \nAbility to convert complex technical issues into concise business risk narratives and actionable decisions. \nDemonstrated ability to lead through ambiguity, manage competing priorities, build consensus, and drive accountable execution in a fast-paced environment.\nPhysical Requirements and Working Conditions\nTypical office and remote-work environment with extended periods using a computer. \nAvailability outside normal business hours as needed for significant incidents, exercises, or business-critical events. \nDomestic and international travel may be required based on business needs. \nThis position has a Remote location: Associate will have no regular requirement to be on-site. Travel on-site is limited to special events.\nCarhartt is a tobacco free workplace.","description_format":"text","description_chars":9715,"description_truncated":false,"requirements":{"experience_years_min":15,"management_years_min":8,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-01T20:41:01Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":112500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":65,"band":"ok","label":"Likely open","p_open":1,"p_active":0.867,"p_room":0.75,"age_days":35,"expected_fill_days":50,"reasons":["conf:1","velocity","win:late"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/carhartt-sr-director-cybersecurity","json_url":"https://alion.io/job/carhartt-sr-director-cybersecurity.json","meta":{"generated_at":"2026-10-20T19:47:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22882,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1758705},"rest":"https://alion.io/mcp/rest/get_company?id=1758705"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcarhartt-sr-director-cybersecurity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcarhartt-sr-director-cybersecurity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcarhartt-sr-director-cybersecurity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/carhartt-sr-director-cybersecurity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcarhartt-sr-director-cybersecurity"}]}