Director of Cyber Security

Leads KAYAK's global team of security engineers as Director of Cyber Security, a hands-on leadership role in a security function organised around the six domains of the NIST Cybersecurity Framework. The director works with the CISO and other senior colleagues on the company's security strategy, roadmap and operating model.

The team spans incident response, vulnerability management, identity and access management and application security, and the director runs the programme's daily operations, including threat detection and response, vulnerability management and endpoint security. They work with engineering, infrastructure and product teams so that security is part of how systems are built and run, look after vendor relationships, contribute to budget planning for tools and services, and hire, onboard and develop their people. Making security goals measurable and tied to business priorities is part of the brief, as is pushing for more AI and automation in the team's work, an area KAYAK is actively investing in, and assessing new threats, including those that AI itself introduces.

KAYAK wants at least ten years in cybersecurity with substantial people leadership, a record of building or maturing security programmes, and breadth across operations, incident response, IAM, cloud and application security or architecture. Technical depth in Linux, networking, firewalls and Kubernetes, familiarity with NIST CSF, CIS, SOC 2 and PCI DSS, and experience reporting metrics to senior leaders are expected. The role is hybrid, with three days a week in the Concord, Massachusetts office.