Vice President & CISO overseeing global Information Security program at a manufacturing company. Leading strategy, governance, and management across U.S., Germany, and India teams.
Responsibilities
Develop and execute the global information security strategy aligned to business objectives and risk appetite.
Provide quarterly cybersecurity updates to the Audit Committee and Executive Management Team.
Establish security governance, policies, and standards consistent with leading frameworks (NIST CSF, ISO 27001, CIS).
Oversee enterprise risk assessments and maintain a risk-based roadmap for continuous improvement.
Lead the design, implementation, and management of all security technologies and controls including endpoint protection, identity & access management, SIEM/SOC operations, cloud security, vulnerability management, and network security.
Ensure proactive monitoring, rapid detection, and response to security incidents across global operations.
Oversee business continuity and disaster recovery security components in partnership with Infrastructure and Applications teams.
Embed security-by-design into IT and business projects, including cloud, ERP, operational technology (OT), and Industry 4.0 initiatives.
Conduct architectural reviews and threat modeling for new technologies and digital transformation efforts.
Partner closely with Legal to ensure compliance with global data privacy laws, including GDPR, CCPA, and emerging regulations.
Oversee data protection practices, records retention security considerations, and reporting obligations related to data privacy incidents.
Lead the global third-party risk management program, including supplier assessments and ongoing monitoring.
Respond to and manage customer security inquiries, audits, and contractual security requirements.
Drive vendor governance for security tools, MSSP partnerships, and other outsourced services.
Lead a global Information Security team of 12 across the U.S., Germany, and India.
Manage a $3M annual operating budget, ensuring cost-effective investments in technology, services, and capabilities.
Mentor, develop, and scale the team to support global manufacturing operations and business growth.
Requirements
10+ years of progressive experience in Information Security leadership roles.
Minimum 3 years as a CISO or a deputy/second-in-command security leader in a larger enterprise.
Deep expertise in security operations, architecture, governance, risk, compliance, and incident response.
Strong working knowledge of NIST CSF, ISO 27001, CIS Controls, and modern cybersecurity technologies.
Experience in global environments and working with distributed teams.
Demonstrated ability to present complex cybersecurity topics to Audit Committees and senior executives.
Security Consultant providing IT - Security Consulting by leveraging knowledge and skills to assist clients. Involved in diverse projects from analysis to execution and results presentation.
Lead functional safety for product development in PEM electrolyzers at Quest One. Collaborate with teams and support certification processes in the field of green hydrogen technology.
(Senior) Consultant in Automotive - & Product Security at Wavestone, focusing on cyber security solutions for clients in innovative projects. Collaborative work in a vibrant team environment across multiple German cities.
Consultant specializing in Cyber & Product Security for clients in a hybrid role. Focused on implementing security strategies and conducting assessments with a collaborative approach.
Information Security Manager focusing on risk management for Xecuro GmbH. Implementing and optimizing risk management processes within a technological environment in Bonn.
Information Security Expert working on safe digital solutions, ensuring compliance and conducting risk assessments. Join Xecuro GmbH in shaping Germany's digital future with innovative security measures.
Teamlead position for Security Governance & Assurance at Xecuro GmbH in Bonn. Leading team and implementing information security management systems (ISMS).
Lead ISSO ensuring security compliance for multi - tenant cloud and hybrid environments at Agile Defense. Responsible for vulnerability analyses and risk management decision - making expertise.
Security Engineer designing and deploying agentic AI systems that operate within enterprise environments for Capgemini. Collaborating on security engineering and applied AI system development.