Executive Manager - Information Security

Overview

The Information Security Lead plays a vital role in the Business Information Security Office by acting as a trusted advisor and driver of security integration during digital transformation efforts across various enterprise domains such as Supply Chain, Commercial, Finance, HR, and Enterprise Platforms. This role collaborates closely with business leaders, IT, OT, cybersecurity teams, and transformation groups to incorporate security-by-design principles early in initiatives involving AI, cloud, data platforms, and automation while promoting security maturity and consistent risk management.

Responsibilities

• Lead security transformation activities for major business and technology projects, ensuring security requirements are embedded from strategy through execution.
• Work with business and technology stakeholders to develop actionable security roadmaps aligned with transformation goals.
• Define and implement secure-by-design approaches for advanced technologies including AI/ML, cloud environments, and automation platforms.
• Ensure transformation initiatives conform with enterprise security frameworks, architectural guidelines, and risk tolerance.
• Provide expert guidance and coaching on risk identification, mitigation planning, and acceptance to global transformation teams.
• Identify systemic and transformation-related security vulnerabilities and oversee prioritized remediation and improvement plans.
• Advocate defense-in-depth controls and resilience strategies within transformation cycles.
• Advise on emerging security risks such as AI-related threats, third-party dependencies, cloud concentration, and data protection concerns.
• Enhance the BISO operating model by developing reusable processes, playbooks, metrics, and automation to scale security involvement.
• Create tailored security enablement materials for business, engineering, and transformation stakeholders.
• Promote collaboration among Business, IT, Risk, Privacy, and Cybersecurity teams by reducing organizational barriers.
• Support Agile and product-focused delivery methods while maintaining rigorous security governance.
• Establish trusted relationships and act as security lead for major initiatives, influencing decisions through clear communication of risk trade-offs.
• Deliver presentations on security programs, incident trends, threat landscapes, and risk posture relevant to transformation.
• Collaborate with incident response teams to assist in recovery efforts and integrate lessons learned into security patterns and controls.
• Maintain an up-to-date understanding of enterprise domains, technologies, and threat environments to ensure effective security alignment.

Qualifications

• Bachelor's or higher degree preferably in Information Security, Engineering, Computer Science, or related IT field.
• At least 4 years of IT experience supporting enterprise functions with exposure to areas like Supply Chain, ERP, CRM, cloud, data analytics, AI, or domain-specific systems.
• A minimum of 3 years in Information Security roles such as BISO, security architect, engineer, or risk leader.
• Proven experience supporting significant digital or business transformation projects.
• Knowledge of NIST Cybersecurity Framework, NIST AI Risk Management Framework, CIS Critical Security Controls, OWASP Top 10, and emerging risks related to LLM/Generative AI.
• Familiarity with Agile methodologies, product-centric delivery, and modern program management techniques.
• Professional certifications like CISSP, CISM, CRISC, or GIAC (e.g., GSEC) are advantageous.
• Fluent in verbal and written English.

Skills & Competencies

• Excellent communication and interpersonal skills with the ability to engage executives.
• Skill in explaining complex security and technical concepts in business terms.
• Strategic thinker oriented towards systemic and transformational improvement.
• Creative problem solver who thrives in collaborative, action-focused environments.
• Capability to analyze, simplify, and automate processes for better efficiency.
• Experience managing multiple priorities across diverse global teams.
• Resilient and effective under pressure in fast-paced transformation settings.
• Highly organized, detail-focused, and self-driven.
• Committed to continuous learning and improvement with a curious mindset.