Libertyville Senior Director And Chief Information Security Officer IL 60048 3781

Job description

The Senior Director and Chief Information Security Officer is the IT Leader responsible for establishing and leading the global cybersecurity and information-risk program. The role is responsible for protecting customers, colleagues, data, products, technology and critical operations while enabling the organization to innovate and grow with confidence. The Senior Director and Chief Information Security Officer advises the CIO, executive leadership and the Board on material cyber risk, sets the enterprise cybersecurity strategy, provides independent challenge and assurance, and leads preparedness for significant cyber incidents. The role works across Technology, Product, Legal, Privacy, Compliance, Internal Audit, Operations and business leadership to embed security into decisions and change programs. Responsibilities Enterprise Cybersecurity Strategy & Governance • Develop and maintain the enterprise cybersecurity strategy, operating model, governance framework, and multi-year investment roadmap aligned with business priorities. • Advise the CIO, executive leadership team, and Board regarding material cyber risks, emerging threats, strategic investments, and residual risk. • Establish cybersecurity policies, standards, decision rights, risk tolerance, and risk acceptance processes. • Partner with business, technology, and risk leaders to integrate cybersecurity into strategic planning and decision-making. Cyber Risk Management, Compliance & Assurance • Maintain an enterprise view of cybersecurity risks, mitigation plans, dependencies, and residual risks. • Translate technical risks into business impacts affecting customers, operations, reputation, regulatory obligations, and strategic objectives. • Lead security assurance activities, including audits, regulatory compliance, customer assurance, risk assessments, and control effectiveness reviews. • Oversee remediation of material control deficiencies, audit findings, and recurring security risks. Cyber Resilience, Incident Response & Crisis Leadership • Lead preparedness and response for significant cybersecurity incidents, including ransomware, data compromise, supplier failures, and operational disruptions. • Establish crisis management, incident response, business continuity, disaster recovery, and cyber resilience capabilities. • Ensure executive escalation, materiality assessments, regulatory notifications, recovery planning, and external communications are defined, exercised, and improved. • Sponsor executive exercises to strengthen organizational preparedness and response. Security Architecture, Engineering & Technology Enablement • Establish security architecture, security-by-design principles, enterprise standards, and risk-based controls across technology environments. • Embed cybersecurity and privacy requirements into products, applications, cloud platforms, enterprise systems, data, AI solutions, and transformation programs. • Partner with Enterprise Architecture, Product, Engineering, and Technology leaders to enable secure growth and innovation while reducing risk and technical debt. • Oversee security architecture, engineering, vulnerability management, security operations, identity management, and related capabilities. Third-Party & Operational Security • Establish risk-based cybersecurity requirements for suppliers, cloud providers, outsourcing partners, and strategic vendors throughout their lifecycle. • Oversee security monitoring, detection, response, threat intelligence, vulnerability management, and operational security. • Ensure coordination between internal teams, managed service providers, and critical technology partners. • Monitor and escalate significant third-party, supplier, and concentration risks affecting operations. Leadership, Culture & Organizational Effectiveness • Build and develop a high-performing cybersecurity organization with clear accountability, succession planning, and leadership development. • Foster shared accountability for cybersecurity risk across business and technology functions. • Provide role-based cybersecurity education and awareness to support secure behaviors and risk-informed decisions. • Own the cybersecurity budget, workforce strategy, investment portfolio, strategic supplier relationships, and managed security services. • Drive continuous improvement, operational effectiveness, and value realization across cybersecurity investments. Essential Functions of the Role • Vision-setting and alignment with business strategy. • High-level decision-making and resource allocation. • Oversight of compliance, risk, and organizational culture. • Provide guidance on policies, procedures, and benefits (where applicable). • Collaborate across departments to support organizational goals. • Participate in cross-functional meetings and initiatives. • Communicate effectively via email, phone, and virtual platforms. • Maintain secure handling of sensitive information. • Support audits and regulatory reporting as needed. • Manage multiple priorities and deadlines in a fast-paced environment. Education & Work Requirements • Bachelor’s Degree with 12-15 years of related experience Education & Work Preferences • Significant progressive leadership experience in cybersecurity, technology risk, operational resilience, or related discipline. • Demonstrated experience leading an enterprise cybersecurity program within a complex organization. • Experience advising senior executives on cybersecurity strategy, risk management, and technology investments. • Experience leading cybersecurity incident response, crisis management, and resilience efforts. • Experience building and leading high-performing teams and managing strategic service providers. • Strong knowledge of cybersecurity governance, risk management, security operations, cloud security, identity and access management, and regulatory compliance. • Demonstrated ability to influence across organizational boundaries and communicate complex cybersecurity matters to technical and non-technical audiences. • Advanced degree in Cybersecurity, Information Technology, Business Administration, or a related field.(suggested preference) • Professional certification such as CISSP, CISM, CRISC, CGEIT, or equivalent. • Experience supporting a global, regulated organization. • Experience presenting cybersecurity risk, incident, and investment information to executive leadership and Boards of Directors. • Experience overseeing cloud, application, product, data, AI, and third-party security programs. • Experience establishing enterprise cyber-risk governance, risk appetite, and assurance frameworks. • Experience managing cybersecurity budgets, strategic investment portfolios, and managed service providers. Competencies • Be Agile - Innovates and adapts quickly, approaching change with curiosity while persisting through obstacles. • Be Customer Centric Considers the needs experiences and feedback of customers in all we do. • Be People-Focused - Builds trust and collaborates with an inclusive and empathetic approach. • Be Performance Driven - Operates with an ownership mindset, driving meaningful outcomes. • Live The Schneiders’ Legacy, Our Noble Purpose - Passionately serves Our Mission and Vision, while demonstrating the Immutable Principles. EOE Statement All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. ​ Job Req ID: 36959 Job Segment: Compliance, Information Security, Internal Audit, IT Architecture, Information Technology, Legal, Technology, Finance Apply now » Find similar jobs: View All Jobs, Libertyville, Illinois US, Hollister - Libertyville, Illinois US, Hollister - Finance & Information Technology Jobs, Finance & Information Technology Jobs • Hollister.com • Safe Harbor • Privacy Policy • C