Director of IT & OT Security Operations and Governance

Our client is seeking a Director, IT & OT Security Operations and Governance to lead enterprise cybersecurity operations across both corporate IT and manufacturing Operational Technology (OT) environments. This leader will be responsible for driving security operations, governance, incident response, risk management, and compliance while partnering closely with IT, plant operations, engineering, and executive leadership., * Lead day-to-day cybersecurity operations across enterprise IT and OT environments.

• Manage the organization’s Managed Detection & Response (MDR) provider, ensuring effective 24/7 monitoring, incident response, and operational readiness.
• Lead major cybersecurity incidents from initial detection through containment, recovery, executive communication, and post-incident reviews.
• Partner with plant engineering and operations teams to implement OT security controls while maintaining production reliability.
• Oversee enterprise vulnerability management, remediation planning, risk acceptance, and exception processes.
• Develop and maintain cybersecurity governance, policies, standards, and procedures aligned with industry frameworks including NIST, ISO 27001, and IEC 62443.
• Establish and report on security KPIs/KRIs, including incident response metrics, vulnerability management, endpoint coverage, and overall security effectiveness.
• Support internal and external audits by coordinating evidence collection, control testing, and remediation efforts.
• Drive continuous improvement of security tools, automation, orchestration, and monitoring capabilities.
• Partner with business leaders to strengthen security awareness and promote secure-by-design practices.
• Maintain risk registers, document compensating controls, and support enterprise risk management initiatives.
• Lead, mentor, and develop a team of 5-10 cybersecurity professionals.

The ideal candidate has a strong background leading security operations teams in complex enterprise environments, preferably within manufacturing or industrial organizations. This individual will balance security best practices with operational uptime, safety, and business objectives while mentoring a high-performing team., * Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field (or equivalent experience).

• 10+ years of progressive cybersecurity experience with increasing leadership responsibility.
• Experience leading enterprise Security Operations (SecOps) teams.
• Strong knowledge of both IT and Operational Technology (OT) security within manufacturing or industrial environments.
• Experience managing MDR providers, incident response, vulnerability management, and security operations programs.
• Strong understanding of cybersecurity frameworks such as NIST CSF, NIST 800-53, ISO 27001, and IEC 62443.
• Experience supporting security audits, compliance initiatives, and governance programs.
• Proven ability to build executive-level reporting, dashboards, and security metrics.
• Strong leadership, communication, and cross-functional collaboration skills.
• Experience leading and developing technical teams.

Preferred Experience

• Manufacturing, industrial, utilities, or critical infrastructure experience.
• Experience partnering with plant operations and engineering organizations.
• Experience with security automation, orchestration, and modern security operations tooling.
• Relevant security certifications such as CISSP, CISM, GIAC, or equivalent are preferred.