layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

LAYIQ - Cybersecurity Director – Data Protection, Security Architecture & Third-Party Risk at Texas Capital Bank

1) Data protection program leadership (on-prem, cloud, endpoint)
Own the enterprise data protection strategy and operating model , including classification/labeling, handling rules, DLP, and measurable enforcement outcomes.
Establish a sustainable classification approach (e.g., small, understandable taxonomy tied to handling expectations and controls) and ensure governance/ownership remains active over time.
Implement a phased enforcement approach for DLP (visibility → user education → controlled override → targeted enforcement) to reduce false positives and operational friction.
Define exception processes, review cadence, and tuning workflows so data protection does not become “set-and-forget” shelfware.
Partner with IT, risk, privacy, legal, compliance, and business data owners to align protection controls to real data flows and regulatory expectations.
2) Security architecture leadership
Lead a team of security architects responsible for the security architecture blueprint , including reference architectures, control standards, and reusable patterns.
Run architecture reviews for new technologies and major changes, ensuring security requirements are measurable and implementable (and exceptions are formally governed).
Ensure security architecture integrates with enterprise platforms (IAM, logging/monitoring, endpoint security, cloud controls) and supports delivery velocity with clear guardrails.
3) Third-party cyber risk management & due diligence
Own the end-to-end vendor security assessment lifecycle: intake, risk tiering, due diligence, remediation tracking, risk acceptance, and renewal/continuous monitoring.
Establish/maintain a standardized third-party security addendum and baseline contractual security requirements (with deviations handled via a formal, risk-based exception process).
Ensure vendor security requirements are specific and enforceable (e.g., defined incident reporting timelines, audit rights, and consequences of non-compliance).
4) 3rd Party Cyber Incident response (IR) oversight and preparedness
Ensure incident response capabilities are defined, tested, and integrated across internal teams and third parties, including escalation, containment, recovery, and post-incident corrective actions.
Ensure contractual obligations support response needs (e.g., notification windows, root-cause analysis and corrective action expectations for vendors).

Cybersecurity Director – Data Protection, Security Architecture & Third-Party Risk

Employer job description

Teams / functions owned:

Key responsibilities

Qualifications

About this listing

Listing check

Before you apply

Similar jobs

Similar jobs