Key Responsibilities

• Design and implement a comprehensive information security strategy that aligns with our business goals.
• Develop and enforce security policies, procedures, and standards in compliance with industry regulations.
• Provide strategic advice to the CIO and executive leadership on cybersecurity risks and program effectiveness.
• Manage risk frameworks like ISO 27001 and NIST, ensuring compliance with GDPR, CCPA, and other regulations.
• Lead security initiatives for Operational Technology (OT) and Industrial Control Systems (ICS) in manufacturing.
• Ensure secure access control across facilities using advanced monitoring and digital access systems.
• Conduct regular risk assessments and vulnerability analyses to preempt security threats.
• Direct incident response activities, including investigation, containment, and remediation efforts.
• Perform root cause analysis on incidents and implement corrective actions.
• Evaluate and manage security standards of third-party vendors and service providers.
• Negotiate security terms in contracts and service level agreements.
• Collaborate with legal and compliance teams to meet regulatory requirements.
• Develop and lead security awareness training programs for all employees.
• Stay informed on emerging cybersecurity threats, technologies, and evolving regulations.
• Report on security initiatives, risks, and compliance status to executive leadership and the board.

Qualifications & Experience

• Bachelor’s degree in Computer Science, Information Technology, or Cybersecurity (Master’s degree or certifications like CISSP, CISM preferred).
• Over 10 years of experience in information security, with at least 5 years in leadership roles.
• Demonstrated experience in securing OT and ICS environments within manufacturing settings.
• In-depth knowledge of security frameworks such as NIST and ISO 27001, alongside regulatory compliance.
• Proven expertise in risk management, incident response, and vulnerability management.
• Exceptional leadership, communication, and stakeholder management skills.