Sr Director, Cyber Security at Wheels Up

New York, New York, United States -

Full Time

Start Date

Immediate

Expiry Date

16 Jun, 26

Salary

273000.0

Posted On

18 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cyber Security Strategy, Cybersecurity Governance, Threat Detection, Incident Response, Digital Forensics, Security Monitoring, Third-Party Risk Management, Security Education, SIEM, EDR, IAM, Vulnerability Management, Threat Intelligence, Microsoft Azure, Microsoft M365, Proofpoint

Industry

Airlines and Aviation

Description

Overview At Wheels Up, we're proud to be a global leader in on-demand private aviation. As one of the largest companies in the industry and a strategic partner of Delta Air Lines – we are committed to making private air travel safe, reliable, and enjoyable. With a diverse fleet of owned aircraft plus a global network of trusted charter operators, we offer our customers access to the right aircraft for their needs and the ability to fly on their terms. And it doesn’t stop at private flights. Wheels Up also provides freight services, safety and security solutions, and managed services to individuals, businesses, government agencies, and more. Regardless of how, when or where you want to fly, our mission is simple; deliver a premium, personalized aviation experience for every customer. Role Overview: What You’ll Be Doing In this role, the Senior Director of Cyber Security is responsible for leading and executing the company’s end-to-end cyber defense strategy. This role owns all aspects of cybersecurity operations, including threat detection and response, incident forensics, security monitoring, third-party risk management, and employee security education. The role serves as the senior authority on cybersecurity risk and may function as a de facto or former Chief Information Security Officer (CISO) within a small to mid-sized organization. Responsibilities Your Key Responsibilities (Essential Functions) Cybersecurity Strategy & Governance Own and continuously evolve the enterprise cybersecurity strategy aligned with business objectives and risk tolerance. Establish and maintain cybersecurity policies, standards, procedures, and governance frameworks. Define the long-term security roadmap covering people, process, and technology investments. Serve as the primary executive advisor on cybersecurity risk to senior leadership and, where applicable, the Board. Security Operations, Monitoring & Threat Management Oversee day-to-day cybersecurity operations and real-time monitoring of security events across all environments. Ensure effective operation of security technologies including SIEM, EDR, IAM, vulnerability management, and threat intelligence tools. Proactively identify, assess, and remediate vulnerabilities and emerging threats. Establish and track security KPIs and metrics to measure program effectiveness and maturity. Incident Response & Digital Forensics Lead all cybersecurity incident response activities from detection through recovery and post-incident review. Direct digital forensics investigations related to data breaches, insider threats, or policy violations. Maintain, test, and improve incident response playbooks and escalation procedures. Coordinate response efforts with IT, Legal, Compliance, HR, external partners, and law enforcement as required. Third-Party Risk & Vendor Management Own relationships with cybersecurity vendors, MSSPs, and external consultants. Evaluate, select, and manage security tools and service providers for effectiveness and scalability. Lead third-party risk assessments and vendor security reviews. Ensure ongoing monitoring of vendor performance and compliance with security requirements. Employee Security Awareness & Education Design and oversee a comprehensive cybersecurity awareness and training program. Ensure completion of employee security training, annual certifications, and policy acknowledgements. Promote a strong security culture through onboarding, communications, and leadership engagement. Continuously adapt education programs to address evolving threats such as phishing and social engineering. Risk Management, Compliance & Audit Conduct regular cybersecurity risk assessments and maturity evaluations. Ensure compliance with applicable regulatory, legal, and contractual requirements. Partner with internal and external auditors to support security audits and remediation. Maintain documentation and evidence for audits, certifications, and regulatory inquiries. Leadership, Collaboration & Reporting Lead, mentor, and develop cybersecurity staff and managed service teams. Collaborate with IT, engineering, legal, compliance, HR, and business leaders. Prepare and present regular cybersecurity risk and performance reports to executives. Act as the senior escalation point for critical cybersecurity risks and incidents. Qualifications What You Bring to the Table: Education & Certification Requirements We’re looking for someone who has a unique mix of experience, skills, and passion for what we do: 10+ years of progressive experience in cybersecurity, including leadership roles. Demonstrated experience operating an enterprise-wide cybersecurity program. Strong technical depth and familiarity with leading technologies such as Microsoft Azure, Microsoft M365, Email Security Technology (Proofpoint), and CDN Technology (Cloudflare). Prior experience serving as or equivalent to a CISO in a small to mid-sized organization preferred. Strong expertise in security operations, incident response, and digital forensics. Proven experience managing third-party security vendors and MSSPs. The Extras We Value (Preferred Requirements) While not mandatory, here are some additional things that would make you stand out: Bachelor’s degree in Information Security, Computer Science, or related field; Master’s degree a plus. Relevant certifications such as CISSP, CISM, CRISC, or equivalent. Experience supporting cloud-based and hybrid technology environments. Strong executive communication and stakeholder management skills. Physical Requirements We want to make sure you’re fully equipped for success. Here’s a look at any physical requirements needed for this role: Prolonged periods of sitting at a desk and working on a computer Frequent use of hands and fingers for typing, writing, and operating office equipment Ability to speak and hear clearly in person and via phone or video Ability to occasionally stand, walk, bend, or reach Close vision and ability to adjust focus for computer screens and documents What We Offer What We Offer: Salary Range & Benefits At Wheels Up, we believe in fair compensation based on experience, skills, and qualifications. The salary for this role ranges from $240,000 to $273,000, depending on a variety of factors. We don’t typically start individuals at the top of the salary range; your place within the range is based on what you bring to the table. Additionally, you may be eligible for a discretionary annual incentive program, which rewards individual and organizational performance. We also offer a range of benefits designed to support your well-being and personal life, including: Tuition Reimbursement Competitive 401(k) Comprehensive Medical, Dental, and Vision Insurance Complimentary access to mental health and wellness counseling through Spring Health A variety of additional programs and services in support of your total well-being Everyone is welcome here Each of us is unique, and that’s what makes us amazing. We believe there’s power in bringing people with different backgrounds, points of view and life experiences together. So, bring yourself and your best ideas. Wheels Up is committed to a policy of equal employment opportunity for applicants and employees. It is our policy to apply recruiting, hiring, training, promotion, compensation and professional development practices and make all other employment decisions without regard to actual or perceived race, color, religion, sex (including pregnancy, sexual orientation and gender identity), national origin, age , disability, genetic information, or any other characteristic protected by federal, state or local laws, regulations or ordinances. Because when we feel safe and comfortable being ourselves, there’s no limit to what we can achieve. Need Accommodations? If you have a disability or are a disabled veteran and need assistance with applying, please reach out to us at hr@wheelsup.com. Simply include “Accommodation Request” in the subject line so we can quickly address your needs. We look forward to learning more about you and how you can contribute to the Wheels Up journey!

Responsibilities

This senior director role is responsible for leading and executing the company’s end-to-end cyber defense strategy, owning all aspects of cybersecurity operations including threat detection, incident forensics, and third-party risk management. Key duties involve owning the enterprise cybersecurity strategy, overseeing security operations, leading incident response, managing vendor risk, and developing employee security awareness programs.