Director of Cyber Security

Company Overview

 

Imagine Everything. Build the Future with Hexion.

 

At Hexion, we push boundaries, rethink possibilities, and create real impact. We activate science to deliver progress—developing breakthrough solutions that strengthen industries, protect communities, and drive a more sustainable future.

 

This is where bold thinkers, problem-solvers, and innovators come together to shape what’s next. Whether you're engineering advanced materials, transforming manufacturing technologies, or leading strategic innovation, your ideas and actions leave a lasting mark. We cultivate an inclusive culture of growth, collaboration, and accountability, ensuring every contribution propels us forward.

 

We don’t follow the status quo—we challenge it, disrupt it, and improve it. Every role at Hexion is part of something bigger.

 

We invest in innovation, sustainability, and continuous development—equipping you with the tools, training, and opportunities to excel. With an unwavering commitment to safety, partnership, belonging, and impact, we empower you to lead change and strengthen industries worldwide.

 

Your Future Starts Here.  

 

If you’re ready to push limits, reimagine what’s possible, and create the extraordinary, Hexion is where you belong. 

 

Anything is possible when you imagine everything. 

Position Overview

 

The Director of Cyber Security is responsible for Hexion’s Cyber Security program. That will involve identifying, evaluating and reporting on cyber security risk to information assets, while supporting and advancing business objectives.  This position will partner with the CIO to update the Hexion Board of Directors, SLT, Enterprise Risk Management team, and the entire Hexion organization regarding our cyber risk, consistently identified as a top 10 risk for the company each year. 

 

The Director of Cyber Security position requires a visionary leader with sound knowledge of business management and a working knowledge of cyber security technologies covering the corporate network as well as the broader digital ecosystem. This role is responsible for establishing and maintaining the cyber security program to ensure that information assets and associated technology, applications, systems, infrastructure and processes are adequately protected in the global digital ecosystem in which we operate. The Director will have a firm grasp of the entire Hexion Enterprise Architecture and partner with all levels of the organization for the cyber impact of changes to said environment.  Requires a firm knowledge of overall Hexion Infrastructure, Service Desk, Servers & Storage, Workplace Services, Network, and various enterprise applications across the Hexion landscape. 

 

A key element of the role is working with stakeholders to determine acceptable levels of risk for the organization. This individual will proactively work with our Managed Services Provider, IT personnel and the business to implement practices that meet agreed-on policies and standards for cyber security. The Director of Cyber Security will understand and articulate the impact of cyber security on the business and be able to communicate this to the stakeholders such as IT Leadership, Senior Leadership Team and the Board of Directors. 

Job Responsibilities

 

Establish Governance and Build Knowledge :

• Acts as the CISO for Hexion, across all areas of Cyber Security and Governance 
• Strategic Leadership & Governance: Define and drive the company’s enterprise-wide information security strategy, aligning with corporate goals and regulatory requirements, while fostering a risk-aware culture across global operations. 
• Cybersecurity Architecture & Operations: Oversee design, implementation, and continuous improvement of security architecture, threat detection, incident response, and data protection programs to safeguard critical manufacturing systems, IP, and business data. Liaises with the enterprise architecture to build alignment between the security and enterprise (reference) architectures, thus ensuring that cyber security requirements are implicit in these architectures and security is built in by design 
• Compliance & Risk Management: Ensure compliance with industry regulations (e.g., NIST, ISO 27001, GDPR, CISA directives), conduct regular risk assessments, and lead mitigation initiatives to reduce business exposure. 
• Collaboration & Stakeholder Engagement: Partner with IT, Legal, Operations, and Executive teams to integrate security into digital transformation efforts, supply chain security, and enterprise systems a