{"id":1771426,"url":"https://alion.io/job/exponent-director-of-information-security","title":"Director of Information Security","company":{"id":452188,"name":"Exponent","domain":"exponent.com","url":"https://alion.io/company/exponent-5","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Phoenix, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":180000,"max_usd":338000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":2716},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-10-03T15:40:17Z","employer_posted_date":"2026-10-03","last_verified_at":"2026-11-05T19:48:49Z","board_verified":true,"closed_at":null,"days_open":33,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":33},"description":"About Exponent\nExponent is the only premium engineering and scientific consulting firm with the depth and breadth of expertise to solve our clients’ most profoundly unique, unprecedented, and urgent challenges.\nOur vision is to engage multidisciplinary teams of science, engineering, and regulatory experts to empower clients with solutions that create a safer, healthier, more sustainable world. For over five decades, we've connected the lessons of past failures with tomorrow's solutions to advise clients as they innovate technologically complex products and processes, ensure the safety and health of their users, and address the challenges of sustainability.\nJoin our team of experts with degrees from top programs at over 500 universities and extensive experience spanning a variety of industries. At Exponent, you’ll contribute to the diverse pool of ideas, talents, backgrounds, and experiences that drives our collaborative teamwork and breakthrough insights. Plus, we help you grow your career through mentoring, sponsorship, and a culture of learning. Thanks for your interest in joining our team!\nKey statistics:\n950+ Consultants \n640+ Ph.D.s \n90+ Disciplines \n30+ Offices globally \nOur Opportunity\nWe are currently seeking a Director of Information Security residing in Phoenix, AZ. In this role you will work as part of the Information Technology Team reporting to the Vice President of Information Technology\nYou will be responsible for\nACCOUNTABILITY\nEXPECTED SCOPE\nStrategy, governance and executive advisory\nDevelop and execute the multiyear security and privacy strategy, roadmap, operating model and investment priorities. Translate cyber, privacy, operational and regulatory risk into clear business, financial, client and reputational impact for executive leadership, board and governance bodies\nISMS, PIMS and regulatory assurance\nServe as accountable manager for ISO/IEC 27001, 42001 and ISO/IEC 27701. Chair required governance forums; maintain policies, objectives, risk treatment, management review, evidence and continual improvement. Coordinate with Legal on applicable contractual, legal and privacy obligations.\nSecurity risk and architecture\nDirect enterprise risk assessment, risk acceptance, control design and secure architecture across identity, cloud, network, endpoint, applications, data and AI. Embed security and privacy requirements into projects, acquisitions, vendors and technology change.\nSecurity operations and resilience\nProvide executive oversight for incident response, threat detection, vulnerability management, access governance, penetration testing, digital forensics and incident coordination. Ensure escalation, communications, law-enforcement and external-response decisions are documented and exercised.\nPrivacy and data protection\nAct as Data Protection Officer and privacy escalation authority. Oversee privacy risk assessment, data protection requirements, information classification, data handling, transfer and disclosure decisions, and alignment with global privacy obligations.\nClient, third-party and market assurance\nOwn the security assurance model for client questionnaires, contractual commitments, audits and restricted-information requirements. Direct third-party security risk management and support business development by clearly articulating Exponent’s security and privacy posture.\nMetrics, audit and continuous improvement\nEstablish business-relevant metrics covering risk, incidents, vulnerabilities, audit findings, control effectiveness, awareness, third parties and program maturity. Sponsor internal and external audits, drive remediation, and report trends and investment outcomes.\nLeadership, budget and operating maturity\nLead, develop and retain the security and privacy team; define accountability, succession, on-call coverage and service expectations. Own budget planning, vendor and contract portfolio, resource allocation, and delivery through internal teams and managed service partners.\nLeadership Outcomes\nMaintain a defensible, audit-ready security and privacy program aligned to Exponent’s business objectives and client commitments.\nReduce material cyber and privacy risk through prioritized treatment plans, clear ownership, measurable controls and timely escalation.\nEnable consulting, litigation and corporate operations to adopt technology, cloud and AI securely without unnecessary friction.\nProvide executives with concise, decision-oriented reporting on risk posture, incidents, investment needs and program maturity.\nBuild a resilient operating model with documented authority, repeatable processes, qualified backups and effective external partners.\nYou will have the following skills and qualifications\nProgressive leadership experience directing enterprise information security, privacy, cyber risk or related programs in a distributed, regulated or client-trust-dependent environment. This experience must include building, transforming and or directing an information security program. \nDemonstrated ownership of security strategy, governance, budget, vendors, metrics and multiyear transformation roadmaps.\nProven experience managing a compliance program. \nPractical leadership of ISO/IEC 27001 programs and audits; working knowledge of privacy management and ISO/IEC 27701 strongly preferred.\nExperience directing incident response, vulnerability management, identity and access governance, third-party risk, security architecture, MDR/MSSP services and audit remediation. This must include experience responding to a business impacting incident. \nAbility to advise executives, clients, auditors, counsel and technical leaders, including during incidents, regulatory scrutiny and high-impact decisions.\nWorking knowledge of modern Microsoft security and identity capabilities, cloud platforms, endpoint and network security, data protection, Purview, AI security and secure software practices.\nBachelor’s degree in information technology, cybersecurity, risk management or a related field, or equivalent relevant experience.\nRelevant certification such as CISSP required or expected; CISM, CRISC, PMP, ISO 27001 Lead Implementer/Lead Auditor, or privacy credentials are valued.\nLeadership Competencies\nBusiness and risk judgment\nBalances protection, client obligations, cost and speed; makes clear, defensible decisions under uncertainty.\nExecutive communication\nConverts technical risk into concise business choices, ownership, investment and measurable outcomes.\nIncident leadership\nProvides calm, decisive authority during incidents and coordinates technical, legal, privacy and business response.\nEnterprise influence\nBuilds trusted partnerships across IT, Legal, HR, Finance, Operations, consultants, clients and third parties.\nOperational discipline\nEstablish durable governance, metrics, evidence, service ownership, succession and continuous improvement.\nTalent leadership\nSets clear expectations, develops capability, delegates effectively and creates accountability without concentrating knowledge.\nLife @ Exponent\nTo learn more about life at Exponent and our impact, please visit the following links:https://www.exponent.com/careers/life-exponenthttps://www.exponent.com/company/our-impact\nWe value and encourage diversity, equity and inclusion across all facets of our firm. Having a team built of people with different backgrounds, skills and perspectives allows us to provide better value to our clients and enjoy an enriched work environment.\nOur firm is committed to offering a variety of programs and resources to support health and well-being. We believe that providing competitive benefits, as well as compensation and recognition programs, empowers our staff to do work that makes a difference.\nWork Environment\nAt Exponent, we have found that in-person interactions deepen employee engagement and are crucial for development, for realizing the full potential of our talented and diverse teams, and for building a more inclusive workplace where all have a sense of belonging. In our offices, you can expect a supportive culture and a collaborative, dynamic, multi-disciplinary work environment.I-Onsite\nCompensation\nThe pay rate for this position is dependent on experience and capabilities which will be assessed during the interview process.\nBenefits you will enjoy\nAccess benefits information on our Life@Exponent page: https://www.exponent.com/careers/life-exponent\nExponent is a proud equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, veteran status, disability, sexual orientation, gender identity, or any other protected status.\nIf you need assistance or accommodation due to a disability, you may email us at .\nJob Locations\nUS-AZ-Phoenix","description_format":"text","description_chars":8819,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-03T15:40:17Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 8 · green card filings: 3","filings_12m":8,"filings_prev_12m":15,"green_card_filings_12m":3,"median_offered_wage_usd":117500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":45,"band":"ok","label":"Likely open","p_open":1,"p_active":0.822,"p_room":0.55,"age_days":32,"expected_fill_days":29,"reasons":["conf:1","win:tail","comp:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/exponent-director-of-information-security","json_url":"https://alion.io/job/exponent-director-of-information-security.json","meta":{"generated_at":"2026-11-05T20:18:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27572,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":452188},"rest":"https://alion.io/mcp/rest/get_company?id=452188"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fexponent-director-of-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fexponent-director-of-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fexponent-director-of-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/exponent-director-of-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fexponent-director-of-information-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1771426}},{"tool":"search_jobs","arguments":{"company":"exponent.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1771426},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}