Oversees multiple ISSMs, managing comprehensive security programs across various countries or businesses, and ensuring compliance with diverse government regulations
Provides strategic leadership and direction to a team of ISSMs across multiple regions or businesses
Develops, implements, and maintains a comprehensive information security strategy aligned with diverse government compliance requirements
Oversees the creation and management of security policies, standards, and procedures that meet various national and international regulations
Coordinates and standardizes security practices across different countries or businesses while conforming with unique compliance requirements
Leads enterprise-wide risk management efforts, ensuring consistent risk assessment and mitigation strategies across all operations
Manages relationships with government agencies, regulators, and external auditors across multiple jurisdictions
Oversees the budget for global information security initiatives and justifies security investments to leadership
Develops and maintains a comprehensive compliance program that addresses the requirements of multiple government requirements
Leads high-level incident response planning and execution for major security events that may have international implications
Provides regular briefings to leadership and the board of directors on the global security posture, compliance status, and risk landscape
Stays informed about evolving international cybersecurity regulations and emerging global threats
Fosters a culture of security awareness and compliance across the entire organization
Drives innovation in security practices to address evolving threats in a global context
Requirements
Typically, a Bachelor Degree (or equivalent) in Computer Science, Information Security, Business Administration, or related field
15+ years of experience in information security, with 8+ years in senior leadership roles
Extensive knowledge of international information security frameworks, standards, and compliance requirements (e.g., NIST, ISO 27001, GDPR, CMMC)
Certifications Required: CISSP (Certified Information Systems Security Professional)
Additional senior-level certifications such as CISM, CRISC, or CGEIT