Senior Director, Information Security
About the Role
As the Senior Director of Information Security, you will lead the enterprise security program and serve as the single point of accountability for the company’s security posture across IT, Operational Technology (OT), product, and customer-facing domains. This role acts as the primary liaison between the security organization and senior leadership, ensuring security strategy aligns with business objectives and cross-functional security teams operate in a coordinated manner. While security functions are distributed across Product, Software & Services (OT), and CTO organizations, this role holds end-to-end functional ownership of the security program, ensuring alignment with a single security strategy, risk appetite, and global standards spanning IT, OT, manufacturing, cloud, and SaaS environments.
The Senior Director of Information Security reports to the CIO with direct communication to the Audit & Risk Committee on security and risk topics. This is a matrixed leadership position with direct ownership of IT security functions and functional (dotted-line) authority over security functions in Product, Software & Services (OT), and CTO organizations.
Responsibilities
- Security Strategy, Governance & Executive Liaison
- Own and evolve the enterprise security strategy, roadmap, and operating model.
- Serve as the connection point between executive leadership, the Board Audit and Risk Committee, and operational security, translating risk into business terms.
- Establish and maintain enterprise-wide security policies, standards, and a common risk framework applied consistently across all streams.
- Ensure cross-functional security teams are aligned, avoiding duplication and closing coverage gaps across IT and OT.
- IT Security — Directly Owned
- Security Operations: Own the SOC, incident response, red team, and threat management, ensuring consistent incident management across IT and OT.
- Information Security: Own security compliance and audit management, including external audits across cloud, manufacturing, and SaaS environments.
- Customer-facing operational security: Own customer security incident management and SaaS environment security, ensuring adherence to legal and regulatory requirements.
- Functional Alignment Across Other Organizations
- Set standards, define requirements, and govern execution for security functions outside IT while respecting each organization’s operating model:
- Product Security (Product Org): Secure SDLC / P-Gate, pen testing, and security scanning.
- OT / Software & Services Security: PKI and customer-facing identity provider (IDP).
- Customer-facing security (CTO / Product Org): Security pre-sales, post-sales, and customer contract review.
- Set standards, define requirements, and govern execution for security functions outside IT while respecting each organization’s operating model:
- Cross-Stream Operating Model
- Maintain a single, coherent security operating model and define interfaces, RACI, and escalation paths between IT, Product, OT, and customer-facing functions.
- Drive consistent standards, metrics, reporting, and maturity assessments across all streams.
- Champion a security culture across the organization.
Qualifications
- Senior security leadership experience (typically 8+ years in security, with significant time in a leadership role) spanning enterprise IT and at least one of OT, product, or SaaS security.
- Demonstrated ability to lead in a matrixed environment, exercising influence over teams not under direct reporting lines.
- Strong command of security governance, risk, and compliance, including external audit management across cloud, manufacturing, and SaaS contexts.
- Hands-on understanding of SOC operations, incident response, threat management, secure SDLC, PKI, and identity.
- Proven executive communication skills, including Board-level engagement.
- Relevant certifications (e.g., CISSP, CISM, or equivalent) preferred.
Key Performance Indicators
- Reduction in mean time to detect/respond (MTTD/MTTR) across IT and OT.
- Successful completion of external security audits (cloud, manufacturing, SaaS).
- Consistency of security standards adoption across all organizations.
- Customer incident handling and SaaS security commitments met within regulatory requirements.
Benefits
- Comprehensive medical, dental, and vision coverage.
- Life insurance and a 401(k)-retirement plan with a generous company match.
- Three weeks of Paid Time Off (PTO) and eleven paid holidays.
- Tuition reimbursement program.
- Optional pet insurance and supplemental medical coverage.
- Additional perks for health, wellness, and enrichment.
Pay
The pay range for this role is $190,000 - $215,000 per year. The actual base salary offered depends on factors such as qualifications, relevant experience, skills, education, and certifications.