Director of Cyber Security Full Time NEW

Diopter is an AI deepfake and social research cybersecurity platform being created to help defend companies against AI social engineering attacks. With experienced generative AI founders Rohan Gupta (prev. CEO and Co-Founder of QuillBot, 35M+ monthly active users and $200M exit) and Jeremy Pippin (VP Product at QuillBot & FanDuel), Diopter is focused on offering world-class deepfake detection and social engineering production to SMB and mid-market companies across the United States and Canada.

Key Responsibilities

• Define and govern enterprise cybersecurity architecture across cloud, on-premise, and hybrid environments, ensuring alignment with business objectives and risk posture.
• Lead the evaluation, implementation, and optimization of cybersecurity technologies and platforms across the organization.
• Drive security architecture and design reviews for applications, infrastructure, platforms, and digital transformation initiatives.
• Evaluate emerging cybersecurity solutions through structured proof-of-concept (POC) programs and recommend strategic technology adoption.
• Assess the effectiveness, scalability, and regulatory alignment of security controls and solutions across the enterprise.
• Develop and enforce cybersecurity governance frameworks, standards, policies, and control baselines.
• Ensure security controls meet business, regulatory, and enterprise risk management requirements.
• Oversee security exceptions, deviations, and formal risk acceptance processes.
• Lead enterprise vulnerability management programs, including vulnerability assessments, penetration testing, remediation tracking, and risk prioritization.
• Provide strategic oversight of Security Operations Center (SOC) functions, including monitoring effectiveness, threat detection, and incident response readiness.
• Define and monitor cybersecurity KPIs, SLAs, dashboards, and executive reporting metrics.
• Plan and lead cybersecurity drills, tabletop exercises, and simulated attack scenarios to strengthen organizational resilience.
• Oversee external attack surface management to identify exposed assets, vulnerabilities, and emerging threats.
• Lead brand protection and monitoring initiatives to detect phishing, impersonation, fraud, and reputational risks.
• Collaborate with internal teams, technology partners, auditors, regulators, and external stakeholders to drive remediation and risk mitigation efforts.
• Ensure compliance with applicable cybersecurity and cyber resilience regulations, including SEBI guidelines and industry standards.
• Lead different compliance initiatives, risk assessments, audits, and continuous improvement programs.
• Act as the primary cybersecurity liaison for regulators, auditors, executive leadership, and key business stakeholders.

Ideal Candidate

• 12–15 years of progressive experience in cybersecurity leadership, including security architecture, engineering, governance, risk management, and compliance.
• Proven track record of leading enterprise-wide cybersecurity programs and complex security transformation initiatives.
• Strong expertise in vulnerability management, SOC oversight, incident response, cyber resilience, and security governance.
• Deep understanding of regulatory and compliance frameworks.
• Demonstrated ability to lead cross-functional teams and influence senior leadership, auditors, and regulatory bodies.
• Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related discipline.
• Industry certifications such as CISSP, CISM, CCSP, ISO 27001 Lead Auditor/Implementer, or equivalent are highly preferred.