Top 3 director of information security Jobs in columbus

Director Application & Data Technology Risk
The Hartford —Columbus, OH
- $153,600 - $230,400 a year
- Full-time
- Hybrid work
- Office
- US work authorization
- APIs
Director, IT Infrastructure Operations
OhioHealth —Columbus, OH
- Full-time
- Hybrid work
- Computer science
- Computer Science
- HIPAA
Director, IT Endpoint Engineering
OhioHealth —Columbus, OH
- Full-time
- Hybrid work
- Computer science
- Computer Science
- HIPAA

Other jobs to consider

Find your next job by exploring related positions.

Director, Inpatient Coding and Compliance
The Ohio State University —Columbus, OH
The information collected and used by medical information management staff is interconnected with the clinical and business systems of the health system and is…
School Director (Principal)
Career Prep Schools —Columbus, OH
Ensure students have the resources they need to develop their “Life Blueprint” and pursue a meaningful post-graduation pathway.
$70,000 - $100,000 a year
Quick Apply

Show more related jobs

Explore jobs in cities nearby

Check out jobs in cities near your current location, Columbus

Director Application & Data Technology Risk
The Hartford —Columbus, OH
This role focuses on application‑driven risks throughout the software development lifecycle (SDLC), including design, development, deployment, and ongoing…
$153,600 - $230,400 a year
Director, IT Infrastructure Operations
OhioHealth —Columbus, OH
The ability to explain complex technical ideas and issues to both technical and non-technical audiences is desired. Master’s Degree in a related field.

Show more jobs in cities nearby

I want to receive the latest job alert for director of information security in columbus

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

director of information security jobs near columbus

Director Of Information Technology jobs in Columbus, OH

Director Of Information Technology jobs in Sacramento, Ca

Technology jobs in Milwaukee, Wi

Director Of Information Technology jobs in West Allis, Wi

Director Of Information Technology jobs in Joliet, Il

Information Technology jobs in Albuquerque, Nm

Director Of Information Technology jobs in Phoenix, Az

Information Technology jobs in Rochester, Ny

Technology Education Teacher jobs in New Jersey

Art Director Game jobs in Remote

Director Of Information Technology jobs in College Park, Md

Health Information Management jobs in Atlanta, Ga

Director Of Information Technology jobs in New York State

Health Information Technician jobs in Michigan

Director Of Information Technology jobs in Harris County, Tx

Director Government Affairs jobs in Washington, Dc

Director Of Information Technology jobs in Nashville, Tn

Director Application & Data Technology Risk

The Hartford -
Columbus, OH

Apply Now

Job Details

Full-time
$153,600 - $230,400 a year

Qualifications

Cloud identity and access management (IAM)
Software engineering
General IT Controls
Application Architecture Design (Architecture design skill)
Security architecture risk management
Application design
Task prioritization
Continuous integration
Access control management
IT controls auditing
AI applications
Cloud services

Full Job Description

Job Details

Location:

Columbus, OH

Category:

Information Technology

Employment Type:

Full time, Hybrid

Job Ref:

R2625234-174

Director Information Security - IS06AE

We’re determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals – and to help others accomplish theirs, too. Join our team as we help shape the future.

The Director, Application & Data Technology Risk provides senior leadership for identifying, assessing, and managing technology risks across the enterprise application landscape. This role focuses on application‑driven risks throughout the software development lifecycle (SDLC), including design, development, deployment, and ongoing operations, while maintaining strong awareness of data risk, sensitive data exposure, and risks associated with the use of artificial intelligence (AI), automation, and emerging technologies.

The Director serves as a trusted risk advisor to CIOs and senior technology leaders, partnering to enable modern application delivery while ensuring risks are understood, clearly communicated, and managed in alignment with enterprise risk appetite, regulatory expectations, and business priorities.

This role will have a Hybrid work schedule, with the expectation of working in an office (Columbus, OH, Hartford, CT or Charlotte, NC) 3 days a week. Candidates must be eligible to work in the US without company sponsorship

Key Responsibilities

Application & Technology Risk Leadership

Lead the identification and management of application‑level technology risks, including secure design, SDLC controls, configuration weaknesses, dependency risks, and operational resilience.
Provide risk oversight across the end‑to‑end application lifecycle, including requirements, architecture, development, testing, release, and production support.
Assess risks introduced through modern engineering practices, including agile delivery, DevOps, CI/CD pipelines, APIs, cloud‑native services, and third‑party integrations.
Partner with application, platform, and security teams to promote adherence to security, infrastructure, and engineering control expectations.

Data Risk & AI Exposure

Evaluate data risk and sensitive data exposure within applications, including unauthorized access, data leakage, improper transmission, retention weaknesses, and aggregation risk.
Provide risk guidance on AI, GenAI, and automation use cases, with emphasis on data sourcing, access governance, explainability, monitoring, and emerging regulatory or ethical risks related to technology.
Maintain awareness of evolving risks associated with AI adoption and emerging technologies, ensuring they are incorporated into application risk assessments and governance.

Infrastructure & Cloud Dependencies

Maintain strong understanding of infrastructure and cloud dependencies (e.g., identity and access management, logging and monitoring, network security, encryption, resiliency) that directly influence application risk.
Partner with infrastructure, cloud, and cybersecurity teams to assess shared‑responsibility risk impacts on applications.

Executive Partnership & Risk Storytelling

Serve as a trusted risk partner to CIOs and senior technology leaders, supporting informed decision‑making while enabling delivery.
Translate complex technical risks into clear, business‑relevant risk narratives that articulate impact, likelihood, trends, and tradeoffs.
Present concise risk perspectives to senior leadership, technology governance forums, and risk committees, focusing on decision‑oriented insights rather than issue listings.
Influence prioritization decisions by balancing business value, delivery timelines, and risk exposure.

Risk Reporting & Governance

Own and deliver application and data technology risk reporting for senior leadership, highlighting trends, concentration risk, and systemic control gaps.
Define, monitor, and mature risk metrics, KRIs, and leading indicators related to application security, data exposure, DevOps maturity, and AI.
Identify patterns across findings and assessments to surface root causes and enterprise‑level risk themes.
Support audit, regulatory, and internal governance activities by representing application, data, and AI risk topics with credibility and consistency.

People Leadership

Lead, coach, and develop a team of technology risk professionals focused on application and emerging technology risk.
Promote a culture of partnership, transparency, and accountability across technology and risk teams.

Required Experience & Qualifications

10+ years of experience in technology risk management, application security, IT audit, engineering, or related domains.
Strong working knowledge of application architectures, SDLC, DevOps practices, and CI/CD pipelines.
Demonstrated experience assessing data risks and data exposure within application environments.
Practical understanding of AI and automation risks, including model governance, data usage, and control considerations.
Solid familiarity with cloud and infrastructure control domains (IAM, logging, encryption, network security, resiliency).
Proven ability to communicate effectively with senior leaders and translate technical issues into executive‑level insights.
Experience working with industry frameworks (e.g., NIST, CIS Controls, COBIT, secure SDLC standards).

Preferred Qualifications

Prior hands‑on experience in software engineering, application architecture, platform operations, or DevOps.
Experience managing risk in high-growth, technology-driven organizations with evolving governance expectations
Relevant certifications such as CISSP, CISM, CRISC, CISA, or cloud security certifications.

Compensation

The listed annualized base pay range is primarily based on analysis of similar positions in the external market. Actual base pay could vary and may be above or below the listed range based on factors including but not limited to performance, proficiency and demonstration of competencies required for the role. The base pay is just one component of The Hartford’s total compensation package for employees. Other rewards may include short-term or annual bonuses, long-term incentives, and on-the-spot recognition. The annualized base pay range for this role is:

$153,600 - $230,400

Equal Opportunity Employer/Sex/Race/Color/Veterans/Disability/Sexual Orientation/Gender Identity or Expression/Religion/Age

Apply Now

Refine Your Search

director of information security jobs in columbus

Director, IT Infrastructure Operations

Director, IT Endpoint Engineering

Other jobs to consider

Explore jobs in cities nearby

I want to receive the latest job alert for director of information security in columbus

Explore jobs in more locations

Job Details

The Director serves as a trusted risk advisor to CIOs and senior technology leaders, partnering to enable modern application delivery while ensuring risks are understood, clearly communicated, and managed in alignment with enterprise risk appetite, regulatory expectations, and business priorities.

This role will have a Hybrid work schedule, with the expectation of working in an office (Columbus, OH, Hartford, CT or Charlotte, NC) 3 days a week. Candidates must be eligible to work in the US without company sponsorship

Key Responsibilities

Application & Technology Risk Leadership

Lead the identification and management of application‑level technology risks, including secure design, SDLC controls, configuration weaknesses, dependency risks, and operational resilience.

Provide risk oversight across the end‑to‑end application lifecycle, including requirements, architecture, development, testing, release, and production support.

Assess risks introduced through modern engineering practices, including agile delivery, DevOps, CI/CD pipelines, APIs, cloud‑native services, and third‑party integrations.

Partner with application, platform, and security teams to promote adherence to security, infrastructure, and engineering control expectations.

Data Risk & AI Exposure

Evaluate data risk and sensitive data exposure within applications, including unauthorized access, data leakage, improper transmission, retention weaknesses, and aggregation risk.

Provide risk guidance on AI, GenAI, and automation use cases, with emphasis on data sourcing, access governance, explainability, monitoring, and emerging regulatory or ethical risks related to technology.

Maintain awareness of evolving risks associated with AI adoption and emerging technologies, ensuring they are incorporated into application risk assessments and governance.

Infrastructure & Cloud Dependencies

Maintain strong understanding of infrastructure and cloud dependencies (e.g., identity and access management, logging and monitoring, network security, encryption, resiliency) that directly influence application risk.

Partner with infrastructure, cloud, and cybersecurity teams to assess shared‑responsibility risk impacts on applications.

Executive Partnership & Risk Storytelling

Serve as a trusted risk partner to CIOs and senior technology leaders, supporting informed decision‑making while enabling delivery.

Translate complex technical risks into clear, business‑relevant risk narratives that articulate impact, likelihood, trends, and tradeoffs.

Present concise risk perspectives to senior leadership, technology governance forums, and risk committees, focusing on decision‑oriented insights rather than issue listings.

Influence prioritization decisions by balancing business value, delivery timelines, and risk exposure.

Risk Reporting & Governance

Own and deliver application and data technology risk reporting for senior leadership, highlighting trends, concentration risk, and systemic control gaps.

Define, monitor, and mature risk metrics, KRIs, and leading indicators related to application security, data exposure, DevOps maturity, and AI.

Identify patterns across findings and assessments to surface root causes and enterprise‑level risk themes.

Support audit, regulatory, and internal governance activities by representing application, data, and AI risk topics with credibility and consistency.

People Leadership

Lead, coach, and develop a team of technology risk professionals focused on application and emerging technology risk.

Promote a culture of partnership, transparency, and accountability across technology and risk teams.

Required Experience & Qualifications

10+ years of experience in technology risk management, application security, IT audit, engineering, or related domains.

Strong working knowledge of application architectures, SDLC, DevOps practices, and CI/CD pipelines.

Demonstrated experience assessing data risks and data exposure within application environments.

Practical understanding of AI and automation risks, including model governance, data usage, and control considerations.

Solid familiarity with cloud and infrastructure control domains (IAM, logging, encryption, network security, resiliency).

Proven ability to communicate effectively with senior leaders and translate technical issues into executive‑level insights.

Experience working with industry frameworks (e.g., NIST, CIS Controls, COBIT, secure SDLC standards).

Preferred Qualifications

Prior hands‑on experience in software engineering, application architecture, platform operations, or DevOps.

Experience managing risk in high-growth, technology-driven organizations with evolving governance expectations

Relevant certifications such as CISSP, CISM, CRISC, CISA, or cloud security certifications.