Director, Information Security Promotion

The Director of Information Security for the North America (NA) region is responsible for leading and overseeing the cybersecurity strategy, governance, risk management, compliance, and security operations across all NA business units, manufacturing facilities, engineering environments, and corporate functions.

This role serves as the senior regional security leader and partners closely with global cybersecurity leadership, IT, engineering, manufacturing, legal, compliance, HR, and business executives to protect company assets, intellectual property, manufacturing operations, connected technologies, and customer trust.

The Director will ensure alignment with automotive industry cybersecurity requirements, regulatory obligations, and global enterprise security standards while enabling business growth and operational resilience.

Key Responsibilities

Cybersecurity Leadership & Strategy

• Lead the North America information security program across corporate, manufacturing, engineering, and operational technology (OT) environments. 
• Develop and execute regional cybersecurity strategies aligned with global enterprise objectives. 
• Serve as the primary cybersecurity advisor to NA executive leadership. 
• Drive security maturity improvements through risk-based planning and measurable outcomes. 
• Establish security roadmaps, budgets, staffing plans, and strategic initiatives. 

Governance, Risk & Compliance (GRC)

• Establish & maintain company cybersecurity policies and procedures.
• Oversee regional cybersecurity governance processes and ensure adherence to enterprise security policies and standards. 
• Manage cybersecurity risk assessments for business operations, manufacturing plants, supplier ecosystems, and engineering platforms. 
• Ensure compliance with: 
  • TISAX 
  • NIST Cybersecurity Framework 
  • Automotive customer cybersecurity requirements 
  • Privacy and data protection regulations 
  • SOX/JSOX and contractual obligations where applicable
  • DENSO Global control standards
• Coordinate internal and external security audits and remediation activities. 
• Present cybersecurity risks, metrics, and program status to executive leadership. 

Security Operations & Incident Response

• Oversee regional security operations 
• Lead cybersecurity incident response activities within the NA region. 
• Vulnerability management (in partnership with server, application, network and other IT & OT teams)
• Coordinate with global SOC, legal, HR, communications, and external partners during incident investigations. 
• Ensure business continuity and cyber resilience capabilities are maintained and tested. 

Manufacturing & Operational Technology (OT) Security

• Influence security decisions of OT initiatives across manufacturing facilities and industrial control system environments. 
• Partner with plant operations, engineering, and infrastructure teams to improve OT security posture while minimizing operational disruption. 
• Support secure manufacturing modernization and Industry 4.0 initiatives. 

Engineering & Product Security Collaboration

• Partner with product engineering and R&D organizations to support secure development practices. 
• Assess cybersecurity and safety product design deliverables and compliance with automotive cybersecurity (ISO 21434) and functional safety (ISO 26262) standards, and other customer requirements. 
• Support protection of intellectual property, engineering data, and prototype environments. 

Third-Party & Supply Chain Security

• Oversee cybersecurity assessments and risk management activities for suppliers, service providers, and external partners. 
• Partner with Purchasing organization to engage suppliers to make security improvements.

Team Leadership

• Lead, mentor, and develop regional cybersecurity personnel and manager