Director, Information Security Promotion

DENSO International America, Inc.
Southfield, MI, United States
3 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Compensation
$186,700.0 - $233,400.0
Working hours
Regular working hours
Job source

Tech stack

Cloud Computing Cyber Security Identity and Access Management Software Vulnerability Management Tisax Software Security Information Technology Process Control Systems Operational Systems

Job description

The Director of Information Security for the North America (NA) region is responsible for leading and overseeing the cybersecurity strategy, governance, risk management, compliance, and security operations across all NA business units, manufacturing facilities, engineering environments, and corporate functions.

This role serves as the senior regional security leader and partners closely with global cybersecurity leadership, IT, engineering, manufacturing, legal, compliance, HR, and business executives to protect company assets, intellectual property, manufacturing operations, connected technologies, and customer trust.

The Director will ensure alignment with automotive industry cybersecurity requirements, regulatory obligations, and global enterprise security standards while enabling business growth and operational resilience., Cybersecurity Leadership & Strategy

  • Lead the North America information security program across corporate, manufacturing, engineering, and operational technology (OT) environments.
  • Develop and execute regional cybersecurity strategies aligned with global enterprise objectives.
  • Serve as the primary cybersecurity advisor to NA executive leadership.
  • Drive security maturity improvements through risk-based planning and measurable outcomes.Establish security roadmaps, budgets, staffing plans, and strategic initiatives.

Governance, Risk & Compliance (GRC)

  • Establish & maintain company cybersecurity policies and procedures.
  • Oversee regional cybersecurity governance processes and ensure adherence to enterprise security policies and standards.
  • Manage cybersecurity risk assessments for business operations, manufacturing plants, supplier ecosystems, and engineering platforms.
  • Ensure compliance with:
  • TISAX
  • NIST Cybersecurity Framework
  • Automotive customer cybersecurity requirements
  • Privacy and data protection regulations
  • SOX/JSOX and contractual obligations where applicable
  • DENSO Global control standards
  • Coordinate internal and external security audits and remediation activities.Present cybersecurity risks, metrics, and program status to executive leadership.

Security Operations & Incident Response

  • Oversee regional security operations
  • Lead cybersecurity incident response activities within the NA region.
  • Vulnerability management (in partnership with server, application, network and other IT & OT teams)
  • Coordinate with global SOC, legal, HR, communications, and external partners during incident investigations.Ensure business continuity and cyber resilience capabilities are maintained and tested.

Manufacturing & Operational Technology (OT) Security

  • Influence security decisions of OT initiatives across manufacturing facilities and industrial control system environments.
  • Partner with plant operations, engineering, and infrastructure teams to improve OT security posture while minimizing operational disruption.Support secure manufacturing modernization and Industry 4.0 initiatives.

Engineering & Product Security Collaboration

  • Partner with product engineering and R&D organizations to support secure development practices.
  • Assess cybersecurity and safety product design deliverables and compliance with automotive cybersecurity (ISO 21434) and functional safety (ISO 26262) standards, and other customer requirements.Support protection of intellectual property, engineering data, and prototype environments.

Third-Party & Supply Chain Security

  • Oversee cybersecurity assessments and risk management activities for suppliers, service providers, and external partners.Partner with Purchasing organization to engage suppliers to make security improvements.

Team Leadership

  • Lead, mentor, and develop regional cybersecurity personnel and managers.
  • Create annual plans, initiatives, KPIs, and budgets. Track & report progress against these plans.
  • Foster a culture of accountability, collaboration, and continuous improvement.
  • Build strong partnerships across technical and business functions.Support talent acquisition, succession planning, and cybersecurity awareness initiatives.

Requirements

Do you have experience in Vulnerability management?, * Bachelor’s degree in Information Security, Computer Science, Information Technology, Engineering, or related field.

  • 10+ years of progressive cybersecurity or information security experience.
  • 5+ years in leadership or management roles overseeing enterprise security programs.
  • Experience in:
  • Cybersecurity frameworks and standards
  • Incident response
  • Vulnerability management
  • Identity and access management
  • Cloud and infrastructure security
  • Security governance and risk management
  • Security Awareness / Culture change
  • Experience interacting with executive leadership and external auditors/customers.Strong communication, leadership, and stakeholder management skills., * Experience within automotive, manufacturing, or industrial environments.
  • Familiarity with:
  • TISAX
  • ISO 21434
  • NIST CSF
  • Professional certifications such as:
  • CISSP
  • CISM
  • CRISC
  • GIAC certifications Experience managing distributed regional teams and global collaboration models.

Benefits & conditions

3.63.6 out of 5 stars Southfield, MI $186,700 - $233,400 a year - Full-time, Pulled from the full job description

  • 401(k) 4% Match
  • Tuition reimbursement
  • AD&D insurance
  • Health insurance
  • 401(k) matching
  • Paid time off
  • Vision insurance, * Medical, Dental, Vision, Prescription Drug plans
  • 401K with 4% Company Match
  • Vacation/PTO and 13 paid Holidays
  • Bonus Program
  • FSA/HSA and Dependent Care Programs
  • Company provided Life, Disability, ADD and Business Travel Insurance
  • Various No Cost Wellness & Chronic Condition Management Programs
  • Various Optional Insurance programs such as legal, identity theft, critical illness, etc.
  • Tuition Reimbursement
  • Career Development and Ongoing Training
  • Employee Assistance Program
  • Employee Spotlight and Recognition Program
  • Volunteer Opportunities
  • Onsite Fitness Center (vary by location)
  • Cafeteria and food markets (vary by location)Onsite Health Clinic and Pharmacy (vary by location)

Candidates residing 50+ miles from the work location are eligible for relocation assistance.

Annual Salary: $186,700 - $233,400

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

11:26 min

Identifying system risks and collaborative ecosystem legal challenges

Hans-Jürgen Eidler · LIVE

2:27 min

Introduction to WebAssembly in a cloud computing context

Edo Edo · WWC 2024

2:15 min

Overcoming cultural resistance to achieve international security compliance standards

Ali Yazdani Ali Yazdani · WWC 2023

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

2:17 min

Governing enterprise IT as a global automotive CIO

Katrin Lehmann Katrin Lehmann +1 · Coffee With Developers

2:51 min

Alibaba Cloud developer resources and cloud computing training

Cheng Zhang · LIVE

Videos

See all

Related articles

See all