Director, Deputy Chief Information Security Officer (69030)

7 Days Old

Overview Requisition ID: 69030 Whirlpool Corporation is a leading home appliance company, with a global footprint and iconic brands. This role is for a senior cybersecurity leader who will interface between the Vice President, Chief Information Security Officer (CISO) strategic activities and the work of the Security Engineering and Operations Team. The Deputy CISO translates business risk requirements into operational requirements, develops performance metrics, and coordinates security operations within a shared services model. The position provides regular status and service-level reporting to the CISO and peers, and represents security requirements during yearly planning to ensure security measures are incorporated into strategic plans. This role has direct management responsibility for the Global Cybersecurity functional areas described below.
Responsibilities
Global Fusion Center , including the Global Security Operations Center, Incident Response, Threat Surface Management and Threat Intelligence.
Global Security Engineering and Architecture . Responsible for the technology stack in support of cybersecurity services, including standards, blueprints and reference architectures for technical controls across the global footprint.
Identity and Access Management Operations . Manages the lifecycle of all digital identities including provisioning/deprovisioning, Identity Governance, Access Reviews and Privileged Access Management.
Manage teams (first line and senior managers) and delegate responsibilities as appropriate.
Drive strategy and business planning across Fusion Center, Engineering/Architecture and IAM Ops functions.
Provide leadership to foster a culture that delivers plans and projects, encouraging innovation, agility and prudent risk taking.
Influence application of industry trends, identify opportunities for transformation, and engage as a Thought Leader within the industry.
Negotiate internal and external priorities, understanding interdependencies of business strategies across the Enterprise.
Proactively build strategic relationships with senior leadership and influence strategic decision making.
Champion a risk-management culture with security controls aligned to the organization's risk appetite.
Lead process for gathering, analyzing and assessing current and future threat landscape, providing a realistic risk overview to the CISO.
Oversee staffing strategy and talent development processes for the department; formally mentor team members.
Manage security incidents and participate in problem and change management forums.
Work with the CISO and stakeholders to define metrics and reporting strategies for security operations programs.
Manage activities related to technical stack engineering, roadmapping, standards, blueprints and reference architectures for endpoints, data, networks, cloud, applications and IAM.
Coordinate incident management activities including detection, response and reporting.
Oversee threat and vulnerability management and communicate residual risk and treatment plans.
Coordinate Crisis Management as part of Cyber Incident Response, including employee education, incident response, and engagement with law enforcement and external providers.
Lead IAM Operations across multiple vendor security teams for projects and day-to-day identity management activities, including provisioning/deprovisioning and privileged access recertification.
Respond to audit requests and assess controls.
Create and manage plans to measure security improvements and track goals.
Lead projects with global, matrixed teams.
Minimum requirements
Bachelor’s degree required, preferably in Computer Science, Information Systems or equivalent.
10+ years of managing cybersecurity engineering and operations functions.
Security certification including CISSP, CISM, CRISC, CCISO or equivalent.
Preferred skills and experiences
MBA or Master’s degree in management, science, technical, or engineering field.
Significant experience with different regions/business units on risk management and leading information security initiatives.
Knowledge of information security management frameworks (e.g., ISO 27001/NIST CSF).
Ability to foster a collaborative team culture and deliver projects successfully.
Experience building strategic relationships and influencing senior leadership to achieve business goals.
Proven mentoring and development of a diverse, matrixed workforce.
What we offer Generous benefits package, Whirlpool employee discount, fitness and educational reimbursement programs, kitchenettes, and more. Saint Joseph/Benton Harbor locations offer an upgraded office space, free coffee, and access to local amenities.
Additional information Whirlpool’s Ways of Working
Our goal is to provide an environment that helps you perform your best. In this role, in-person work is Monday through Friday, with flexibility and time-off benefits to balance work and life, including:
Always On Flexibility to manage personal and outside commitments.
Two-Week Work from Anywhere (minimum of one-week increments, up to two weeks per year).
Sabbatical: four weeks paid leave after every five years of service.
#LI-JW1
Whirlpool Corporation is committed to equal employment opportunity and prohibits discrimination on the basis of race or ethnicity, religion, sex, pregnancy, gender identity or expression, sexual orientation, age, disability, veteran status, or any other category protected by law.
#J-18808-Ljbffr
Location:
Deputy, IN, United States
Job Type:
FullTime
Category:
Management & Operations, IT & Technology

We found some similar jobs based on your search