Director, Information Security

About Us:

We are committed to finding smart solutions that enable an intelligent and seamless world. Our success as a world-class leader in technology has evolved from humble beginnings. In 1896, the enterprising father and son team of A.J. and George A. Briggs partnered with S.A. Buffington, a Chicago lawyer, to establish Chicago Telephone Supply Company (later to become CTS).

 

Today, CTS is a leading designer and manufacturer of sensors, actuators, and electronic components for suppliers and original equipment manufacturers. We have over 20 locations in 12 countries and more than 3,500 employees. Our innovative sensing, connectivity, and motion solutions offer a diverse range of products across diversified end markets including transportation, medical, aerospace and defense, and industrial. We are at the forefront of supporting innovating life-changing technology, focusing on quality to keep people safe, healthy, and happy. 

 

 

Position Summary

The Information Security Director will play a pivotal role in defining and advancing CTS’s information security framework and strengthening its cybersecurity posture while meeting CTS’s customer supply chain requirements. This role involves identifying, assessing, and prioritizing discovered security and compliance risks and vulnerabilities while ensuring adherence to industry regulations, standards and internal policies.

 

The Information Security Director will oversee the development of metrics and reporting to measure security performance.

 

Key Responsibilities

• Develop and implement a comprehensive information security strategy that aligns with the company's business objectives and regulatory requirements.
• Lead the design, implementation, and management of security controls and processes to protect the company's information assets.
• Ensure compliance with industry security standards and frameworks such as NIST SP800-171, SP800-53 and ISO/IEC 27001/27002.
• Ensure information security risks are identified and managed through standards and frameworks such as ISO/IEC 27005, NIST RMF, NIST SP800-37.
• Conduct regular risk assessments and audits of CTS facilities and operations to identify risks and risk treatment strategies.
• Elevate CTS’s supply chain for risk and compliance.
• Lead incident response planning and execution, including the investigation of security breaches and the implementation of corrective actions.
• Collaborate with cross-functional teams, including IT, OT, legal, compliance and leadership to ensure a cohesive approach to cybersecurity.
• Provide leadership and guidance to the information security team, fostering a culture of continuous improvement and professional development.
• Stay current with emerging cybersecurity threats and trends and proactively adjust the company's security posture as needed.
• Management of CTS’s Security Awareness training program.
• This role requires a strong understanding of cybersecurity frameworks, excellent communication skills, and the ability to manage multiple projects simultaneously.

 

Required Knowledge, Skills, and Abilities

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 10-15 years of experience in information security, with a focus on manufacturing environments.
• Relevant certifications such as CISSP CCISO, GSTRT, CISM, or equivalent.

 

Required Qualifications

• Strong knowledge of the ISO/IEC 27001 and NIST SP800-171 standards/frameworks.
• Strong knowledge of ISO 27001, TiSAX and CMMC certification process.
• Proven experience in leading and managing internal and external cybersecurity teams.
• Excell