Job Description

We are seeking a hands-on Director of Cybersecurity to lead the design, implementation, operation and continuous improvement of Bridgewater Bank’s cybersecurity architecture, engineering, and technology controls. This role combines strategic leadership with direct technical involvement across Azure, Microsoft 365, hybrid infrastructure, identity, SaaS platforms, applications, APIs, integrations, automation, and defensive security technologies. The Director is responsible for developing, coordinating, and executing cybersecurity capabilities aligned to the NIST Cybersecurity Framework (CSF), including security architecture, identity and access management, security operations, threat and vulnerability management, incident response, and cyber resilience. The role leads the implementation and ongoing effectiveness of technology security controls designed to protect the bank's systems, applications, data, and customers.

The position partners closely with the Information Security Officer, Internal Audit, Compliance/ERM, and technology and business leaders to ensure alignment between cybersecurity operations, governance, risk management, and regulatory expectations. The Director also leads technology control assurance activities, supports Internal Audit and regulatory examinations, coordinates control testing across IT teams, and drives timely remediation and closure of identified issues.

RESPONSIBILITIES:

• Lead technical architecture, standards, strategic roadmap development, vendor evaluation, and technology investment recommendations for Azure, Microsoft 365, hybrid infrastructure, SaaS platforms, web technologies, APIs, integrations, automation, and application enablement.
• Own the technical strategy and control design for Microsoft Entra ID/Azure AD, identity and access management, Conditional Access, phishing-resistant multifactor authentication, single sign-on, SAML/OIDC federation, SCIM/JIT provisioning, privileged access, service identities, and joiner-mover-leaver lifecycle controls.
• Lead technical cybersecurity incident response activities, including preparation, detection, containment, eradication, recovery, lessons learned, and coordination with the Information Security Officer and Bank’s Leadership Team.
• Collaborate with IT teams and the Information Security Officer to design and implement comprehensive security strategies, including controls, monitoring, vulnerability management, and reporting.
• Lead threat intelligence meetings and oversee the collection and analysis of relevant security information to proactively mitigate risks.
• Define and operate a technology control testing program (design and operating effectiveness) aligned to NIST CSF; coordinate testing execution across IT and control owners and report results, themes, and remediation needs.
• Manage technology audit and examination workflows, including coordination through Optro, remediation planning, issue tracking, validation of corrective actions, and closure reporting.
• Manage penetration test reporting and governance: coordinate scoping and deliverables with providers, communicate results to stakeholders, track remediation, and ensure retesting/closure activities are completed.
• Develop and deliver technology risk, controls, and audit status reporting to stakeholders including the Information Security Officer, CIO/CTO, ERM/Risk, Compliance, Internal Audit, and management/Board-level committees as applicable; escalate emerging risks and control gaps with clear recommendations.
• Lead technical cybersecurity assessments of third-party technology providers and partner with business and operational leaders to evaluate risk and implement appropriate security controls.
• Serve as a technical resource for key security functions including access controls, data loss prevention, SIEM/SOAR, and cloud/network/endpoint security.
• Own the technology audit readiness and response program, serving as the primary point of coordination for Internal Audit and regulatory examinations; manage audit/exam planning, walkthrough coordination, evidence collection/quality review, and timely delivery of responses.
• Manage and maintain technology risk and security governance documentation, including policies, standards, procedures, control narratives, control evidence requirements, and audit-ready artifacts.
• Identify, report, and remediate vulnerabilities across networks, servers, and endpoints.
• Manage security information and event management solutions for compliance and incident response.
• Lead security technology initiatives and continuous improvement efforts across identity, detection, monitoring, data protection, security automation and defensive security platforms.
• Partner with the Information Security Officer to support technical security education and awareness initiatives technology staff and employees.

QUALIFICATIONS:

• 8+ years of progressive experience in cybersecurity, cloud or infrastructure engineering, enterprise architecture, security architecture, or related technology disciplines, including experience in a highly regulated environment; financial services experience strongly preferred.
• 3+ years of technical leadership, architecture ownership, or team leadership experience, with demonstrated ability to mentor engineers while remaining hands-on with complex technical work.
• Deep experience designing, implementing, and operating cybersecurity controls across Microsoft Azure, Microsoft 365, identity and access management, data protection, and cloud security platforms, including Microsoft Defender, Purview, Entra ID, Conditional Access, and related security technologies.
• Demonstrated experience securing hybrid infrastructure, cloud platforms, SaaS applications, networks, endpoints, web applications, APIs, and related security technologies through architecture, monitoring, vulnerability management, and control implementation.
• Strong understanding of security operations, threat intelligence, incident response, vulnerability management, penetration testing, security monitoring, SIEM/SOAR, and root-cause analysis.
• Demonstrated ability to develop technology standards, reference architectures, roadmaps, resilience strategies, configuration baselines, diagrams, runbooks while evaluating vendors, solutions and emerging technologies.
• Experience supporting technology controls programs in highly regulated environments, including NIST-based control frameworks, internal and external audits, regulatory examinations, issue remediation, and GRC tooling such as Optro.
• Strong understanding of resilient architecture, business continuity, disaster recovery, backup protection, recovery testing, and security considerations for high-availability services.
• Strong written and verbal communication skills, with the ability to translate complex technical issues into clear risk, business impact, options, and recommendations for technical teams, executives, auditors, regulators, and Board-level audiences.
• Industry certification such as CISSP, CCSP, CISM, GIAC, Microsoft Cybersecurity Architect Expert, Azure Solutions Architect Expert, or equivalent is preferred.

ABOUT BRIDGEWATER BANK:

Picture yourself at one of the Twin Cities’ best places to work, surrounded by people who challenge you, support you, and inspire you to be your best. Welcome to Bridgewater Bank.

We’re on a mission to be the finest entrepreneurial bank in the Twin Cities. Like true entrepreneurs, we run fast and lean. We are in constant evolution and the runway for personal and professional growth is long. People are our strength, and that’s why we’ve created and sustained an award-winning culture that promotes growth and celebrates the big and little wins along the way.

At the end of the day, we believe competitive salaries, top-tier benefits, a hybrid work model, and transparency into the business is a given. Working together toward something meaningful with people you enjoy is just a bonus!

COMPENSATION & BENEFITS:

The typical annual base pay range for this role is between $144,500 - $190,000. Compensation may vary based on individual job-related knowledge, skills, expertise, and experience. This position is eligible for a discretionary annual incentive program driven by organization and individual performance.

Bridgewater Bank provides a broad offering of competitive benefits including (but not limited to):

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short-term and long-term disability
• Parental leave
• 401(k) with employer match
• Paid vacation & paid holidays

PLEASE NOTE:

The above is intended to describe the general content of and requirements for this position. It is not to be construed as an exhaustive list of duties, responsibilities, or requirements. It is Bridgewater Bank’s policy to promote equal employment opportunities. All personnel decisions, including, but not limited to, recruiting, hiring, training, promotion, compensation, benefits and termination, are made without regard to race, creed, color, religion, national origin, sex, age, marital status, sexual orientation, gender identity, citizenship status, veteran status, disability or any other characteristic protected by applicable federal, state or local law.

STATUS: Exempt