What are the responsibilities and job description for the Director Information Technology Security position at Knowles Corporation?
TTITLE: Director, IT Security
REPORTS TO: Chief Information Officer
BUSINESS: Corporate
LOCATION: Itasca, IL
SUMMARY DESCRIPTION:
We are a multinational manufacturing company with a global footprint, specializing in high-quality industrial products. Our operations rely on significant Information Technology (IT) and Operational Technology (OT) assets, critical to our production, supply chain, and business processes. We are seeking an experienced IT Security Director to lead our cybersecurity efforts and safeguard our digital and operational infrastructure. Reporting directly to the CIO, this position will lead a team of security professionals, manage risk, ensure compliance with global regulations, and drive initiatives to secure our manufacturing operations, intellectual property, and sensitive data. The ideal candidate is a strategic leader with deep expertise in IT and OT security, a proactive approach to emerging threats, and the ability to align security objectives with business goals.
SPECIFIC DUTIES AND RESPONSIBILITIES:
- Cybersecurity Strategy & Leadership:
- Develop and execute a comprehensive cybersecurity strategy for IT and OT systems, aligned with business objectives.
- Lead the security team, fostering a culture of accountability, collaboration, and continuous improvement.
- Align the security strategy with business objectives and ensure security policies, standards, and practices are embedded across the organization.
- Provide guidance and leadership on security best practices to senior management and the Board of Directors.
- Advise the CIO and senior leadership on security risks, trends, and mitigation strategies.
- Manage the cybersecurity budget, ensuring efficient allocation of resources.
- Risk Management & Compliance:
- Ensure compliance with global regulations (e.g., GDPR, NIST, ISO 27001, CMMC) and industry standards.
- Oversee the development and enforcement of security policies, procedures, and controls.
- Lead the identification, assessment, and prioritization of security risks; recommend appropriate risk mitigation strategies.
- Manage third-party risks and ensure secure relationships with vendors and partners across the company’s entire vendor base and supply chain.
- Ensure that emerging cyber requirements including data sovereignty and residency are tracked in all countries in which the company operates and implement approaches that meet the requirements and business needs.
- Establish and enforce security policies, procedures, and governance frameworks that meet corporate and regulatory requirements.
- IT & OT Security Operations:
- Protect IT assets (e.g., corporate networks, cloud systems, endpoints) and OT assets (e.g., SCADA, PLCs, IoT devices) from cyber threats.
- Implement and manage security tools, including firewalls, IDS/IPS, SIEM, and endpoint protection.
- Oversee incident response, including detection, containment, and recovery from security breaches.
- Oversee security operations, including monitoring, detection, and response to security threats and vulnerabilities.
- Specify, design, implement, and manage appropriate security technologies.
- Manage the company’s Security Operations Center (SOC).
- Threat Intelligence & Incident Management:
- Monitor emerging cyber threats and vulnerabilities specific to manufacturing and OT environments.
- Lead investigations and post-incident reviews to strengthen defenses.
- Coordinate with external partners (e.g., MSSPs, law enforcement) during major incidents.
- Develop and maintain the organization’s incident response and disaster recovery plans.
- Lead the response to security incidents and breaches, ensuring the protection of critical systems and sensitive data.
- Manage the Cyber Incident Response team.
- Cross-Functional Collaboration:
- Partner with IT, OT, and manufacturing teams to integrate security into system design and operations.
- Collaborate with legal, HR, and compliance teams to address data privacy and regulatory requirements.
- Collaborate with third-party vendors to ensure secure supply chain and contractor practices.
- Training & Awareness:
- Develop and deliver cybersecurity training programs for employees and contractors.
- Promote a security-conscious culture across the organization.
- Develop and oversee security training programs to raise awareness among employees.
POSITION/TRAINING REQUIREMENTS:
- Education:
- Bachelor’s or Master’s degree in computer Science, Information Security, or a related field.
- Relevant cybersecurity certifications.
- Experience:
- 15 years of experience in cybersecurity, with at least 5 years in a leadership role.
- Proven experience securing both IT and OT environments in a manufacturing or industrial setting.
- Track record of developing and implementing enterprise-wide security strategies.
- Experience in a multinational, manufacturing company operating in regulated industries.
- Proven track record in implementing and managing information security programs at a senior level.
- Technical Skills:
- Deep knowledge of IT security technologies (e.g., firewalls, SIEM, EDR, IAM).
- Familiarity with OT security protocols and systems (e.g., SCADA, DCS, IEC 62443).
- Experience with cloud security (e.g., AWS, Azure).
- Strong knowledge of security frameworks such as NIST, CMMC and ISO 27001.
- Understanding of regulatory compliance requirements (e.g., CMMC, ITAR).
- Experience with security architecture, risk management, vulnerability management, and incident response.
- Excellent leadership, communication, and interpersonal skills.
- Ability to influence and work with executive teams and key stakeholders.
- Strong analytical and critical thinking skills, with a focus on cybersecurity trends and risk management.
- Certifications (preferred):
- CISSP, CISM, CISA, CRISC, or equivalent.
- Soft Skills:
- Strong leadership and team-building capabilities.
- Excellent communication skills, with the ability to present complex technical concepts to non-technical stakeholders.
- Strategic thinker with a proactive, problem-solving mindset.
- Other Requirements:
- Ability to travel internationally as needed.
- Experience working in a multinational environment is a plus.
- Only US Citizens or Permanent Residents need to apply.
COMPANY DESCRIPTION:
Knowles Corporation (NYSE: KN) is a market leader and global provider of advanced micro-acoustic microphones and balanced armature speakers, audio solutions, and high-performance capacitors and radio frequency ("RF") filtering products, serving the MedTech, Aerospace & Defense, Industrial, Electrification, and Consumer Electronics markets. Our focus on the customer, combined with unique technology, proprietary manufacturing techniques, and global operational expertise, enables us to deliver innovative solutions across multiple applications. Knowles, founded in 1946 and headquartered in Itasca, Illinois, has approximately 5,500 employees at facilities located in 12 countries around the world. For more information, visit knowles.com.
EEO-M/F/D/V
April 2025