Cybersecurity Leadership

Cybersecurity Leadership Jobs

27 jobs found

Today

IT/OT Cybersecurity Lead

Freese and Nichols Orlando, FL

Orlando, FL

Today

Full time Cis Controls Cloud Platforms Cybersecurity Consulting

Apply Now

Job Description

Freese and Nichols seeks an IT/OT Cybersecurity Lead to lead strategic cybersecurity consulting for enterprise IT networks and OT environments across critical infrastructure.

Responsibilities

Build and maintain relationships with key water, wastewater, and critical infrastructure clients, serving as a trusted advisor at executive, IT, and operations levels.
Own cybersecurity services growth strategy, including target clients, service offerings, pricing approach, and annual growth goals in coordination with firm leadership.
Lead pursuits from opportunity identification through award, including capture planning, win strategy, scopes, fees, proposals, and interviews.
Partner with client service leaders and project managers across offices to bring cybersecurity into larger pursuits such as SCADA master plans, treatment plant designs, and AWIA assessments.
Monitor regulatory and funding drivers and convert them into new cybersecurity offerings for clients.
Increase firm visibility through conference presentations, technical papers, webinars, and committee leadership in AWWA, WEF, ISA, and similar organizations.
Develop the cybersecurity team by defining staffing needs, participating in hiring, and shaping a skills mix to support growth.
Mentor staff and grow them into project leads and client-facing advisors through stretch assignments, technical review, and certification planning.
Delegate project delivery to developing staff while maintaining quality oversight and focus on client outcomes.
Establish career paths and succession plans for cybersecurity roles.
Raise cybersecurity capability across I&C, SCADA, and electrical teams by embedding security into internal training and design work rather than retrofitting later.
Set technical direction, methodologies, and quality standards for cybersecurity services across the firm.
Serve as technical lead on complex, high-visibility engagements and provide senior review on other work.
Develop repeatable assessment methods, templates, and tools to improve consistency and enable scaling.
Provide senior direction on secure IT/OT architecture and technology selection, accounting for OT availability, safety, and legacy constraints.
Advise firm leadership on contractual, liability, and risk considerations tied to cybersecurity work, including input to contract language and service terms.
Ensure security requirements reach drawings, specifications, testing, and commissioning on design and construction projects.
Communicate cyber risk in terms that resonate with utility leadership, operations staff, and technical teams to build support for decisions and funding.
Build and lead a high-performing cybersecurity team by shaping staffing needs, hiring well, and creating an environment where people want to grow and stay.
Turn assessment findings into policies, plans, and roadmaps aligned to client staffing, budget, and uptime constraints.
Be recognized by clients as a credible technical authority, capable of executive briefings and detailed design discussions.

Requirements

Bachelor’s degree in cybersecurity, information technology, computer science, computer engineering, electrical engineering, information systems, or closely related discipline.
20+ years of cybersecurity experience, including significant experience across both IT and OT or industrial control system environments.
Current CISSP, CISM, or CISA credential.
Proven track record of winning and growing work with utility or critical infrastructure clients, including serving as primary client contact and leading scopes, fees, proposals, and interviews.
Experience leading complex, high-visibility cybersecurity engagements from pursuit through delivery.
Experience building or growing a cybersecurity service offering, including defining services, staffing, and market positioning.
Experience building and leading teams, including hiring staff and developing them into project and technical leads.
Experience applying cybersecurity frameworks and regulatory requirements to assessments, policies, plans, and roadmaps.
Experience serving water, wastewater, or other critical infrastructure utilities, including AWIA risk and resilience assessments and water-sector cybersecurity guidance.
Ability to travel to client sites including treatment facilities, pump stations, control rooms, and industrial environments as assignments require.

Technologies

SCADA, PLC, RTU, HMI, historian
Identity and access management
Endpoint protection, vulnerability management, logging and monitoring
Security operations
NIST
ISA/IEC 62443, CIS Controls
AWIA
Cloud-connected SCADA, IoT, AI

Benefits

Comprehensive benefits package
Paid overtime for salaried employees
Annual bonus
Access to company cabins in Red River, New Mexico and Banner Elk, North Carolina
Flexible work environment with a hybrid schedule and up to 40% remote work

Preferred

Master’s degree in cybersecurity, information systems, engineering, or related field.
Consulting experience leading client-facing assessments, gap analyses, roadmaps, and advisory engagements.
Existing relationships with water and wastewater utilities or other critical infrastructure clients in Freese and Nichols markets.
Working knowledge of industrial protocols such as Modbus, DNP3, OPC UA, and EtherNet/IP, including ability to explain security limits to clients.
Experience selecting and specifying OT security technologies, including OT monitoring and asset discovery, segmentation, secure remote access, firewalls, and SIEM platforms.
Experience securing cloud and hybrid environments, including cloud-connected SCADA, edge computing, and IoT data pipelines.
Experience leading incident response planning, tabletop exercises, post-incident reviews, and recovery planning for operational environments.
Experience using approved AI tools responsibly to improve quality and efficiency of deliverables.
Leadership roles in professional organizations such as AWWA, WEF, ISA, ISACA, (ISC)2, InfraGard, or WaterISAC, including committee work, presentations, or publications.

Location and Work Arrangement

Orlando, FL (onsite)
Hybrid schedule includes up to 40% remote work

View full job page →

Today

Lead Cybersecurity Test Engineer

Stellantis Auburn Hills, MI

Auburn Hills, MI

Today

Full time Manager Automotive Ethernet Automotive Hardware In The Loop

Apply Now

Job Description

Join Stellantis in Auburn Hills, MI as an onsite Lead Cybersecurity Test Engineer, where you will help validate automotive cybersecurity software features across multidomain HPC and zonal ECU platforms. This role combines hardware-based verification, HIL test environments, and requirements-driven testing to strengthen end-to-end security across interconnected vehicle controllers.

What you’ll work on

You will lead system integration and cybersecurity verification activities for automotive platforms, ensuring secure boot, secure update, ECU authentication, key management, HSM-related capabilities, diagnostic security, and data protection mechanisms are implemented and validated correctly. You’ll execute test scenarios on physical benches and in hardware-in-the-loop environments, then collaborate across cybersecurity, embedded software, system architecture, and domain teams to resolve integration issues.

Responsibilities

Perform system integration and cybersecurity verification of multidomain HPC and zonal ECU platforms.
Integrate ECU software, conduct flashing and configuration, and run cybersecurity test scenarios on physical system benches and HIL environments.
Develop and execute requirements-based test cases for automotive cybersecurity features, including secure boot, secure update, ECU authentication, key management, HSM, diagnostic security, and data protection mechanisms.
Validate cybersecurity functionality across ECU boundaries, including interactions between HPC, zonal controllers, and other vehicle domains.
Use Lauterbach Debugger, Vector CANoe/CAPL, Vector VT System, and dSPACE HIL to execute tests, debug, and perform system-level analysis.
Develop CAPL and Python scripts to automate cybersecurity test scenarios, improve coverage, and increase execution efficiency.
Validate communication and diagnostic interfaces over Automotive Ethernet, CAN, and LIN networks.
Analyze software behavior, debug integration issues, investigate test failures, and collaborate with development teams to drive resolution.
Review system and cybersecurity requirements, identify coverage gaps, and ensure traceability between requirements, test cases, and test results.
Support automated test execution and integrate testing into CI pipelines.
Participate in design and architecture reviews to provide feedback on cybersecurity feature implementation, testability, and system-level integration.
Collaborate with cybersecurity, embedded software, system architecture, and domain teams throughout the software development and validation lifecycle.

Requirements

Strong hands-on experience with automotive debugging and test automation tools, including Lauterbach Debugger, Vector CANoe/CAPL, Vector VT System, and dSPACE HIL platforms.
Comfort across the lifecycle from early software development through system validation, including identifying integration gaps and verifying end-to-end cybersecurity functionality across interconnected vehicle controllers.
Strong background in automotive embedded software, system integration, and cybersecurity verification.

Tools and technologies: Lauterbach Debugger, Vector CANoe, CAPL, Vector VT System, dSPACE HIL, Hardware-in-the-Loop (HIL), Python, Automotive Ethernet, CAN, LIN, CI pipelines.

View full job page →

14d ago

Manager, Development Engineering - Cybersecurity

Emerson Pittsburgh, PA

Pittsburgh, PA

14d ago

Full time Manager Cybersecurity Leadership Incident Response

Apply Now

Job Description

Lead cybersecurity execution across product development and Industrial Automation and Control System (IACS) offerings with Emerson in Pittsburgh, PA.

Responsibilities

Own product cybersecurity strategy, governance, compliance, and secure development practices across the product portfolio.
Direct vulnerability management, penetration testing, and incident response coordination; drive cybersecurity risk mitigation efforts.
Manage third-party cybersecurity solutions, vendor relationships, and third-party integration activities.
Drive compliance and certification initiatives, including IEC 62443 and evolving cybersecurity regulations.
Provide leadership for industrial communications architectures and system integration across operational and enterprise environments.
Partner with internal and external stakeholders to advance product security objectives and technology roadmaps.
Lead, mentor, and develop a team of cybersecurity and communications professionals while promoting a strong security culture.

Requirements

Bachelor’s degree in Cybersecurity, Computer Engineering, Computer Science, Information Technology, Engineering, or related discipline; equivalent combination of education and experience will be considered.
Minimum 5 years of progressive cybersecurity experience, including leading cybersecurity operations, risk management, compliance, and incident response programs.
Strong background in leadership or people management, plus technical foundations in industrial networking, communications, automations, or a related field.
Knowledge of IEC 62443, Vulnerability Management, and NERC-CIP.
Experience with process and product certifications, including SAFETY Act and IEC 62443 4-1, 4-2, & 3-3.
Legal authorization to work in the United States without sponsorship now or in the future.

Technologies

IEC 62443, OPC UA, MQTT, Modbus, DNP3, IEC 61850, PROFINET, BACnet
SAFETY Act, NERC-CIP, ISO 27001
NIST Secure Software Development Framework, NIST Cybersecurity Framework
OWASP Software Assurance Maturity Model, OWASP Secure by Design Framework
Zero trust, Secure by Design
Cloud Security (Azure and/or AWS), Identity & Access Management
Security Operations and Threat Detection, Software Bill of Materials
CISSP, Security+, GICSP

Benefits

Medical insurance plans
Dental and vision coverage
Employee Assistance Program
401(k)
Tuition reimbursement
Employee resource groups
Recognition
Flexible time off plans
Paid parental leave (maternal and paternal)
Vacation and holiday leave

Who You Are

Acts quickly and decisively in fact-changing, unpredictable situations.
Separates relevant from irrelevant signals to manage complex situations.
Communicates effectively in one-on-one, small and large group settings, and across diverse position levels.
Develops others through coaching, feedback, exposure, and stretch assignments.

Preferred Qualifications

10+ years of progressive cybersecurity experience.
Experience securing Industrial Control Systems (ICS), Operational Technology (OT), Manufacturing, or Industrial Automation environments.
Experience supporting global organizations and distributed teams.
Knowledge of the Ovation Product Portfolio, and/or critical infrastructure and industrial cybersecurity regulations impacting power, water, and controls/automation industries.
Professional certifications including CISSP, Security+, GICSP.
Strong understanding of security standards and regulations: ISO 27001, NIST Secure Software Development Framework, NIST Cybersecurity Framework, OWASP Software Assurance Maturity Model, OWASP Secure by Design Framework.
Strong understanding of modern security topics: Zero trust, Secure by Design, Cloud Security (Azure and/or AWS), Identity & Access Management, Security Operations and Threat Detection, Software Bill of Materials.

Our Culture & Commitment

Workplace focused on valuing, respecting, and empowering employees to grow.
Encourages innovation, collaboration, and diverse perspectives.
Supports ongoing career development and an inclusive culture.
Recognizes employee wellbeing.

Work Authorization

Emerson will only employ individuals legally authorized to work in the United States.
No sponsorship is provided for this position.
Not eligible for hire: individuals with temporary visas such as E, F-1 (including OPT or CPT), H-1, H-2, L-1, B, J, or TN, or who need sponsorship for work authorization now or in the future.

Accessibility Assistance or Accommodation

If you have a disability and have difficulty accessing or using this website to apply for a position, contact: idisability.administrator@emerson.com.

View full job page →

15d ago

Operational Technology & IoMT Cybersecurity Solutions Lead

Booz Allen Hamilton Fort Meade, MD

Fort Meade, MD

15d ago

$87k - $198k/yr Full time Cybersecurity Architecture Cybersecurity Engineering Cybersecurity Lead

Apply Now

Job Description

In this role, you will lead the architecture and development of cybersecurity solutions focused on Operational Technology (OT), Industrial Control Systems (ICS), Internet of Medical Things (IoMT), and cyber-physical environments supporting Federal Civilian missions. You will translate customer mission challenges into actionable cybersecurity architectures, technical approaches, and implementation plans, with a focus on vendor-agnostic designs that work across critical infrastructure and connected healthcare environments.

Based in Fort Meade, MD in an onsite work model, this position supports engagements across sectors including healthcare, energy, water/wastewater, transportation, maritime, and federal facilities.

What you will do

Lead the architecture and development of cybersecurity solutions for OT, ICS, IoMT, and cyber-physical environments across the Federal Civilian market.
Serve as a technical solutions leader alongside market leadership, account teams, and engineering specialists to turn mission challenges into cybersecurity architectures, technical approaches, and implementation plans.
Design vendor-agnostic solutions spanning OT asset visibility, vulnerability and exposure management, Zero Trust, network segmentation, secure remote access, threat detection and response, and operational resilience.
Evaluate and integrate commercial technologies while accounting for availability, safety, and operational requirements for critical infrastructure and connected medical environments.
Lead technical discovery sessions, solution whiteboarding, architecture development, technology evaluations, and demonstrations.
Support capture and proposal efforts by developing technical solutions, implementation approaches, work breakdown structures, and rough-order-of-magnitude estimates.
Collaborate with the OT Innovation Hub to develop reusable architectures, technical demonstrations, and threat-emulation scenarios that strengthen scalable cyber-physical security delivery.
Contribute to Federal Civilian missions across healthcare, energy, water/wastewater, transportation, maritime, and federal facilities.

Required qualifications

8+ years of experience with cybersecurity engineering, architecture, or technical solution development, including with OT/ICS, IoMT, or cyber-physical environments.
Experience designing and implementing cybersecurity architectures in operational or mission-critical environments.
Experience with OT asset discovery, vulnerability management, network segmentation, secure remote access, monitoring, or threat detection technologies.
Experience developing technical solution architectures, diagrams, implementation plans, and engineering recommendations.
Experience leading technical customer discovery, architecture workshops, or solution demonstrations.
Experience supporting technical proposals, statements of work, or solution estimates.
Knowledge of industrial networks, SCADA, PLCs, HMIs, IT/OT connectivity, NIST SP 800-82, Zero Trust architecture, and federal cybersecurity requirements.
Ability to evaluate and integrate cybersecurity technologies across enterprise IT and OT environments.
Ability to obtain a Secret clearance.
HS diploma or GED.

Technologies

SCADA
PLCs
HMIs
NIST SP 800-82
Zero Trust architecture
Microsoft Sentinel
Splunk

Nice if you have

Experience securing IoMT environments, including medical-device discovery, clinical network segmentation, device vulnerability management, and healthcare security operations.
Experience with Claroty, Armis, Nozomi Networks, Dragos, or similar OT/IoMT security platforms.
Experience designing Zero Trust architectures for OT environments, including identity, segmentation, secure remote access, and continuous monitoring.
Experience integrating OT security telemetry with Microsoft Sentinel, Splunk, or other SIEM/SOC platforms.
Experience with OT laboratories, cyber ranges, threat emulation, security testing, or validation exercises.
Experience developing reusable cybersecurity reference architectures and technical offerings.
Experience developing solution cost estimates, bills of materials, and technical delivery plans.
Secret clearance
CISSP, GICSP, GRID, GDSA, or relevant technical certifications.

Compensation

USD 86,900 - 198,000 per year

Benefits

Health, life, disability, financial, and retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program

Clearance and security investigation

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Identity verification

During the hiring process, you will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
You are expected to be on camera during interviews and assessments.
Booz Allen reserves the right to take your picture to verify your identity and prevent fraud.

Candidate AI usage policy

AI is part of daily work at Booz Allen, with a commitment to responsible and ethical use.
The use of artificial intelligence or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.

Work model

Onsite: Work will primarily be performed full-time at a customer facility, where employees collaborate directly with colleagues and customers as required by the role.
Employees working virtually are generally expected to have their cameras on during meetings.

Non-discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.

View full job page →

15d ago

Senior Director, US Cybersecurity Services

Royal Bank of Canada Jersey City, NJ

Jersey City, NJ

15d ago

$210k - $380k/yr Full time Senior Cyber Risk Cybersecurity Governance

Apply Now

Job Description

The Senior Director, US Cybersecurity Services role provides strategic leadership and governance for cybersecurity services across US operations, translating regulatory requirements and industry frameworks into practical cyber capabilities.

Location

Jersey City, NJ, United States of America (onsite)

Compensation

USD 210,000 - 380,000 per year

Role Summary

In this position, you will lead the US cybersecurity services function to ensure a strong security posture, regulatory compliance, and consistent adoption of new cybersecurity services and controls across US legal entities. The role includes end-to-end delivery of cybersecurity solutions aligned to US regulatory guidance, industry frameworks, business needs, and emerging threat landscapes.

Key Responsibilities

Lead and manage the US cybersecurity services team to deliver security services and maintain compliance with regulatory requirements across all US legal entities.
Oversee alignment to security best practices, enterprise standards, and local regulatory expectations.
Maintain a resilient, compliant security infrastructure and establish accountability for cyber risk management across the region.
Drive end-to-end cybersecurity solution delivery aligned with US regulatory guidance, industry frameworks, business requirements, and emerging threats.
Act as a subject matter expert to ensure solutions address both compliance mandates and operational business needs.
Adapt global cyber capabilities to US requirements and ensure regulatory obligations are met without unnecessary business disruption.
Evaluate, prioritize, and advance capability enhancement requests to enterprise cyber teams, supported by business rationale and risk-based justification.
Communicate technical and business requirements, regulatory drivers, and risk mitigation benefits to inform enterprise leadership decisions.
Support adoption of new cybersecurity services and controls across US legal entities by partnering with enterprise teams on messaging and implementation strategies for US business units.
Ensure newly operationalized capabilities maximize the return on cyber investments.
Define and maintain a forward-looking US cybersecurity strategy aligned to regulatory frameworks, emerging threats and technologies, and long-term objectives.
Monitor evolving threat landscapes and regulatory changes to update strategy and stay ahead of emerging risks.
Align cyber capabilities, investments, and team development with the organization’s long-term security posture and risk management objectives.

Minimum Qualifications

Bachelor’s Degree with 15+ years of progressive cybersecurity experience, including advancement to leadership or strategic advisory roles, with cyber architecture and engineering disciplines and reporting to executive management.
Minimum 7 years in financial services, banking, or highly regulated industries subject to federal compliance requirements.
Proven experience leading technical teams, developing staff capabilities, and driving technical excellence.

Required Knowledge & Skills

Strategic knowledge of cybersecurity architecture and design principles across multiple security domains, including vulnerability management, data protection, endpoint security, SOC services, threat management, and insider risk.
Ability to assess, design, and support delivery of security solutions that meet technical requirements and regulatory mandates in financial services environments.
Knowledge of US financial services regulatory frameworks, including GLBA, NYDFS, FINRA, and NIST/FFIEC guidance.
Ability to interpret compliance implications and advise on regulatory impact of security decisions.
Executive presence to communicate complex cybersecurity topics clearly to senior management, committees, and diverse stakeholder groups.
Facilitation and stakeholder management skills to drive alignment across business units and geographies.
Strategic mindset for forward-looking planning that balances current compliance needs with emerging threats and technologies.
Risk-based decision-making to prioritize investments based on business impact and resource trade-offs.
Experience managing budgets, allocating resources, and overseeing program implementation across multiple legal entities or geographic regions.
Strong analytical and problem-solving skills to synthesize inputs and recommend actionable solutions.

Benefits

A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
Leaders who support development through coaching and managing opportunities
Ability to make a difference and create lasting impact
Work in a dynamic, collaborative, progressive, high-performing team
A world-class training program in financial services
Flexible work/life balance options
Opportunities to do challenging work

Technical Expertise

Strategic cybersecurity architecture and design principles across multiple security domains, including vulnerability management, data protection, endpoint security, SOC services, threat management, and insider risk.
Experience assessing and supporting delivery of security solutions aligned to technical requirements and regulatory mandates in financial services environments.

Regulatory & Compliance Knowledge

US financial services regulatory frameworks, including GLBA, NYDFS, FINRA, and NIST/FFIEC guidance.
Capability to interpret compliance implications and advise on regulatory impact of security decisions.

Leadership & Strategic Capabilities

Executive presence to communicate complex cybersecurity topics to senior management, committees, and diverse stakeholder groups.
Facilitation and stakeholder management skills to drive alignment across business units and geographies.
Strategic planning capability to balance current compliance needs with emerging threats and technologies.
Risk-based decision-making to prioritize investments based on business impact and resource trade-offs.

Operations and Budget Management

Experience managing budgets, allocating resources, and overseeing program implementation across multiple legal entities or geographic regions.
Strong analytical and problem-solving skills to synthesize information from multiple sources and recommend actionable solutions.

Application Timing

Applications will be accepted until 11:59 PM on the day prior to the application deadline date above.

Job Skills

Critical Thinking
Cyber Security Management
Decision Making
Detail-Oriented
Information Security Management
Information Technology Security
Interpersonal Relationship Management
IT Security Architecture
Performance Management (PM)

View full job page →

17d ago

Cybersecurity & Privacy Attorney

Distinct Recruitment Washington, DC

Washington, DC

17d ago

$175k - $240k/yr Full time Corporate Counsel Cybersecurity Cybersecurity & Privacy

Apply Now

Job Description

Hybrid work in Washington, DC with a national full-service platform, built for attorneys who want to do meaningful cybersecurity and privacy work across compliance, response, and disputes. The role supports privacy compliance programs, incident response, and/or privacy litigation for a DC office, with a salary range of $175,000 to $240,000 and benefits including health coverage, 401(k) and profit sharing, paid time off, and parental leave.

This position is designed for DC-barred cybersecurity and privacy attorneys. You will advise senior leaders directly, including GCs, CISOs, CTOs, and executive teams, while contributing to matters that often intersect with regulators, enforcement, and high-stakes legal risk.

Responsibilities

Build privacy compliance programs and draft relevant policies
Lead incident response, including making notification calls and briefing a board
Defend privacy class actions, breach disputes, or regulatory investigations
Advise senior decision-makers directly, including GCs, CISOs, CTOs, and executive teams

Requirements

JD
Active DC bar admission
Solid experience in cybersecurity, privacy, or both
If bringing clients, share this early so it can be raised with the firm before any commitment

Why this DC office

The DC team’s core work includes government investigations, enforcement defense, government contracts, litigation, and IP. When privacy issues become regulatory concerns, this office is positioned as a natural fit. The firm has served clients across the DMV and statewide for decades, and its attorneys are regularly sought by national press and speak at conferences in the US and abroad.

The package

Salary: $175,000 to $240,000 (the range reflects hiring at two levels: a mid-level attorney toward the lower end, and a more senior attorney with litigation experience or clients of their own toward the top)
Working arrangements: hybrid remote in Washington, DC (details to be discussed)

Benefits

Health, dental and vision
401(k) and profit sharing
Paid vacation and parental leave
A long list of elective benefits on top
401(k)
Dental insurance
Health insurance
Paid time off
Vision insurance

Work location: Hybrid remote in Washington, DC 20006

View full job page →

19d ago

Director, Enterprise Cybersecurity

Alkegen Dallas, TX

Dallas, TX

19d ago

Full time Cybersecurity Leadership Cybersecurity Program Director Cybersecurity Tools

Apply Now

Job Description

Alkegen is seeking a senior enterprise cybersecurity leader based in Dallas, TX to define and drive a multi-year security direction across the business. In this onsite role, you will set governance and risk management expectations, shape security architecture and standards, and lead readiness efforts spanning incident response, OT security, and compliance alignment. You will also serve as the primary executive counterpart for managed security services, advising the CIO and executive leadership.

What you’ll do

Develop and execute a multi-year cybersecurity strategy aligned to Alkegen’s business objectives and risk appetite.
Create cybersecurity roadmaps, define investment priorities, and lead transformation programs.
Identify emerging threats, risks, and opportunities affecting the business, then incorporate findings into strategy and planning.
Act as a trusted advisor to the CIO and executive leadership team.
Drive continuous improvement across cybersecurity maturity, resilience, and readiness.
Lead enterprise cybersecurity governance, standards, policies, and control frameworks, including alignment to NIST, ISO 27001, CIS, and industry-specific requirements.
Oversee cyber risk assessments, risk mitigation programs, and executive risk reporting.
Define meaningful security metrics and executive dashboards to measure effectiveness, and present risks and recommendations to senior leaders.
Serve as Alkegen’s primary cybersecurity leader and executive counterpart to managed security service providers.
Establish service expectations, accountability, escalation paths, and performance measures; govern provider performance via KPIs, SLAs, audits, and continual improvement.
Ensure cybersecurity service providers deliver against business expectations and contractual commitments, and independently evaluate and challenge provider recommendations when needed.
Maintain an internal security capability to govern providers rather than relying on them.
Own enterprise security architecture and technology standards, and lead security-by-design across infrastructure, cloud, applications, data, identity, and operational technology.
Lead strategy for: Identity & Access Management, Cloud Security, Data Protection, Email Security, Security Operations, Vulnerability Management, Network Security, OT Security, and Incident Response & Resilience.
Coordinate executive response during significant cybersecurity incidents, including leading executive communications and briefings.
Ensure incident response, disaster recovery, and cyber resilience plans are maintained and tested, then drive lessons learned and continuous improvement after incidents.
Partner with manufacturing and operations leaders to secure industrial environments, including defining OT cybersecurity standards, governance, and architecture.
Improve visibility, segmentation, access controls, and resilience across manufacturing sites, aligning OT security initiatives with enterprise objectives.
Support internal and external audits, ensuring cybersecurity controls meet regulatory, customer, and contractual obligations.
Partner with Legal, Compliance, Internal Audit, and operational leaders on security risk management.
Maintain audit-ready processes and documentation across the cybersecurity program.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline.
12+ years of cybersecurity experience with increasing leadership responsibility.
5+ years leading enterprise cybersecurity programs within a complex global organization.
Demonstrated experience managing and governing Managed Security Service Providers (MSSPs) or large-scale IT managed service providers.
Experience defining cybersecurity strategy and security roadmaps.
Experience supporting manufacturing and operational technology environments.
Strong understanding of cloud, infrastructure, identity, data protection, and cyber risk management.
Proven ability to influence executive stakeholders and drive organizational change.

Technologies and frameworks

NIST
ISO 27001
CIS
Zero Trust architecture

Preferred qualifications

Master’s degree in Cybersecurity, Information Systems, Business, or related field.
Experience leading cybersecurity programs within a global manufacturing organization.
Experience supporting cybersecurity during acquisitions, integrations, and business transformation initiatives.
Deep knowledge of NIST, ISO 27001, CIS Controls, Zero Trust architecture, and modern cyber defense frameworks.

Preferred certifications

CISSP
CISM
CRISC
CGEIT
GIAC certifications
ISO 27001 Lead Implementer or Lead Auditor

Leadership competencies

Think strategically while executing pragmatically.
Lead confidently in executive and board-level discussions.
Translate technical risk into clear business impact.
Build trust and credibility across technology and business functions.
Hold service providers accountable for measurable results.
Develop strong teams and foster a culture of accountability.
Drive security transformation while balancing operational realities.

Full time Senior Ai Security Audit Remediation

Cybersecurity Leadership Jobs

Get Cybersecurity Leadership Jobs alerts