Director, IT Security

Cozen O'Connor

Director of IT Security managing security operations and leading teams in a hybrid environment. Ensuring compliance with industry standards and securing AI implementations.

Posted 6/26/2026full-timePhiladelphia • Pennsylvania • 🇺🇸 United StatesLeadWebsite

Tech Stack

Tools & technologies

Azure

About the role

Key responsibilities & impact

Lead and grow a Security Operations team while remaining personally engaged in technical work.
Ensure business systems, endpoints, and AI systems are designed and deployed with high industry standards.
Define and lead the firm's approach to AI security, including risks posed by agentic AI systems.
Represent the firm's security program and standards to clients, auditors, and vendors.
Monitor, detect, triage, and manage security incidents and vulnerabilities.
Engineer and tune security controls across Microsoft 365, Azure, and on-premises infrastructure.
Own endpoint security strategy and operations across all firm device types.
Assess the security posture of AI tools and agentic systems used by the firm.

Requirements

What you’ll need

10+ years of progressive information security experience, including 5+ years leading security teams, with demonstrated success as a hands-on technical leader.
Bachelor's degree in computer science, information security, or a related field.
CISSP required; additional certifications such as CISM, CCSP, GIAC (e.g., GSEC, GCIH), or Microsoft security certifications (SC-100, SC-200) strongly preferred.
Direct experience operating security controls within ISO 27001, SOC 1, and SOC 2 Type II certified environments, including supporting successful audits.
Deep technical proficiency securing Microsoft 365 and Azure environments, plus experience securing traditional on-premises data center infrastructure (network, firewall, server, storage).
Hands-on endpoint security experience — EDR platforms, device policy enforcement, patch posture management, and mobile device/BYOD controls at enterprise scale.
Application security / DevSecOps experience: integrating security into custom software development lifecycles through secure coding standards, SAST/DAST tooling, and developer-facing security requirements.
Demonstrated understanding of AI security risk, including the security and data governance implications of agentic AI systems, large language model (LLM) integrations, and AI access to enterprise data stores and data warehouses.
Proven incident response leadership — you have run real incidents, not just tabletop exercises.
Experience presenting security programs to external parties (clients, auditors, regulators) with confidence and credibility.
Ability to work on site in Philadelphia at least 3 days per week.

Benefits

Comp & perks

Health insurance
Retirement plans
Paid time off

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

information securityAI securityendpoint securitysecurity controlsapplication securityDevSecOpsincident responsesecure coding standardsSASTDAST

Soft Skills

leadershipcommunicationpresentation skillstechnical engagementcredibility

Certifications

CISSPCISMCCSPGIACGSECGCIHMicrosoft SC-100Microsoft SC-200