Lead Risk Strategy. Enable Growth. Secure What's Next.
At DYOPATH, cybersecurity isn't just protection; it's a business enabler. We're building security into a competitive advantage for our clients and our organization.
We're looking for a Director, Cybersecurity, to lead and evolve our cybersecurity strategy, drive innovation, and strengthen both internal and client-facing security capabilities. This role is equal parts strategic leader, client-facing advisor, and builder of scalable security services. If you're looking for a role where you can shape cybersecurity strategy, influence revenue growth, and build services clients actually buy, this is it.
Role Details
- Title: Director, Cybersecurity
- Location: Remote
- Schedule: Monday–Friday, standard business hours
- Availability: Occasional after-hours support for security incidents or escalations
- Travel: Limited, international travel (primarily to the United States) based on client and leadership needs
- English Requirement: Advanced (Professional proficiency required)
- Range: Base Compensation: $580,000 - $780,000 MXN Annually, + performance-based bonus
Why This Role Is Different
This isn't about maintaining controls, you will:
- Translate cybersecurity into business value, not just risk mitigation
- Shape & grow cybersecurity services that clients adopt, expand, and retain
- Act as a trusted advisor to executives, clients, and prospects
- Influence both internal security posture and external revenue opportunities
- Lead initiatives that directly impact client trust, retention, and growth
- Build scalable offerings across consulting, vCISO, and managed security
What the Director of Cybersecurity Owns
Cybersecurity Strategy & Execution
- Lead execution and contribute to the development of an enterprise-wide cybersecurity strategy aligned to business objectives
- Develop and maintain a cybersecurity roadmap addressing evolving threats, regulatory needs, and growth priorities
Governance, Risk & Compliance
- Establish and oversee security policies, standards, and frameworks (e.g., NIST, HIPAA, ISO 27001, SOC 2)
- Identify and manage organizational risk, advising leadership on risk posture and mitigation strategies
Client & Revenue Impact
- Serve as a customer-facing cybersecurity leader in sales, presentations, and executive discussions
- Support the growth and evolution of cybersecurity services, including DYOGUARD and strategic offerings
- Act as a fractional CISO advisor for key client accounts
Security Operations & Incident Response
- Oversee internal cybersecurity programs, vendor risk, and compliance initiatives
- Lead incident response planning and execution, working closely with S/NOC and service delivery teams
Product & Service Innovation
- Partner with delivery and product teams to embed security into services and solutions
- Support the development of new cybersecurity offerings and specialty services
Partnership & Ecosystem Leadership
- Manage cybersecurity vendors, partners, and service providers
- Guide the adoption of tools, platforms, and emerging technologies to enhance capabilities
Culture & Leadership
- Build a culture of security awareness, continuous learning, and proactive risk management
- Mentor teams and influence cross-functional collaboration across engineering, operations, and leadership
What Great Looks Like in This Role
You'll stand out if you:
- Think in terms of business outcomes, not just security controls
- Can balance risk, cost, and growth when making decisions
- Bring a client-first mindset to cybersecurity strategy
- Communicate complex security concepts clearly to executives and non-technical stakeholders
- Have experience influencing both technical teams and business leaders
What You'll Do in Your First 90 Days
- Assess current cybersecurity capabilities and identify risk and service growth opportunities
- Align the cybersecurity roadmap with company strategy and revenue priorities
- Establish meaningful KPIs for risk, compliance, and service performance
- Strengthen alignment between cybersecurity, service delivery, and sales
What You Bring
Required
- 8–12 years of experience in cybersecurity or information security roles
- Proven experience leading cybersecurity strategy, governance, and risk programs
- Experience advising senior leadership on cybersecurity initiatives and risk management
- Bachelor's degree in Computer Science, IT, or related field
Preferred
- Experience within an MSP, MSSP, or services-based technology organization
- Certifications such as CISSP, CISM, or CISA
- Experience supporting client engagements, presales, or consulting environments
Why DYOPATH?
- You'll help shape how cybersecurity drives business growth
- Your work will directly impact client trust, revenue, and retention
- You'll influence both internal operations and external service offerings
- You'll be part of a leadership team focused on building scalable, high-impact solutions'
Benefits for the Director of Cybersecurity
- Aguinaldo (25 days – above legal requirement)
- Vacation + 25% premium
- IMSS + Major medical insurance (family included)
- Monthly savings fund + pantry vouchers
- Quarterly performance bonus opportunities
- Paid life events leave (parental, marriage, bereavement)
- EOS Leadership Methods
- Pet Insurance (because pets are family!)
- And more — see full details at https://dyopath.com/careers
Final Thought
This isn't a traditional cybersecurity role. We need a leader who can connect security to business outcomes, influence strategy, and help build the future of cybersecurity services at DYOPATH.
If you're ready to lead, shape, and deliver impact, we'd love to connect.
Equal Opportunity Employer
DYOPATH is committed to a work environment free of all forms of discrimination. DYOPATH recruits and hires without regard to age, color, disability, gender, gender identity, genetic information, marital status, military status, national origin, race, religion, sexual orientation, veteran status, or any other legally protected characteristic. For more information about DYOPATH, please visit our website at www.dyopath.com. The above information has been designed to indicate the general nature and level of work performed by employees in this classification. It is not designed to contain or to be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the employee assigned to this job.
