Vice President of Information Security

SUMMARY: The Vice President of Information Security will play a crucial leadership role in safeguarding the organization’s digital and physical assets. This position involves developing and executing an enterprise-wide vision, strategy, and security program to ensure the protection of information assets and technologies. The Vice President will work closely with executive management to align security initiatives with the organization’s business objectives, especially in the dynamic automotive industry.

RESPONSIBILITIES:

• Lead the development and execution of a comprehensive information security strategy that aligns with the organization’s goals and risk appetite.
• Act as a principal advisor to the executive team on security-related matters, guiding decision-making with risk assessments and mitigation strategies.
• Identify, evaluate, and mitigate risks related to information assets and technology infrastructure.
• Conduct routine security audits and assessments to ensure the effectiveness of current security measures.
• Implement a governance program that aligns information security practices with overall enterprise objectives.
• Establish and enforce security policies, standards, and procedures to ensure compliance with industry regulations and best practices.
• Ensure adherence to legal and regulatory requirements regarding cybersecurity and data privacy.
• Oversee identity and access management (IAM) to ensure authorized access complies with established security policies.
• Direct the development and execution of incident response plans to address and recover from security breaches or incidents.
• Lead post-incident reviews to extract lessons learned and improve future security measures.
• Build and lead a high-performing information security team, fostering a culture of security awareness and continuous improvement.
• Provide mentorship and growth opportunities for team members to develop their skills and expertise.
• Collaborate with IT teams to design and implement robust security architectures that protect systems and data.
• Evaluate and integrate new security technologies that enhance the organization’s security posture.
• Effectively communicate security strategies and initiatives to stakeholders at all levels, including the Board of Directors, ensuring transparency and shared responsibility.
• Develop relationships with external partners, industry groups, and vendors to stay ahead of emerging threats and best practices.
  
  

REQUIREMENTS::

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; Master’s degree preferred.
• Minimum of 10 years of experience in information security, with at least 5 years in a leadership role.
• Strong understanding of information security frameworks, risk management principles, and regulatory requirements specific to the automotive industry.
• Proven expertise in security technologies such as firewalls, intrusion detection systems, encryption, and vulnerability management tools.
• Excellent communication, interpersonal, and presentation skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Prior experience in retail, particularly in high-transaction environments dealing with sensitive customer data, is highly preferred.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent are highly desirable.
• Familiarity with information security management frameworks such as ISO/IEC 27001 and NIST.
• Experience in contract and vendor negotiations, including managed services.
• Knowledge of Agile frameworks is preferred.
• Strong leadership skills with the ability to collaborate effectively with business managers, IT engineering, and operations teams.