Director, Enterprise Cybersecurity

Alkegen•Dallas, NY

About The Position

The Director, Enterprise Cybersecurity defines and drives Alkegen’s enterprise cybersecurity strategy, governance, risk management, architecture, and operational resilience. The role develops multi-year strategies, roadmaps, investment priorities, and transformation programs aligned with business objectives and risk appetite, and advises the CIO and executive leadership on cybersecurity risks and recommendations. The director leads governance of managed security service providers, setting expectations and accountability, assessing performance, and maintaining the internal capability needed to govern and challenge providers. The role owns enterprise security architecture and standards across infrastructure, cloud, applications, data, identity, and operational technology, while leading strategies for security operations, vulnerability management, network security, incident response, and related security domains. The position coordinates executive response to significant cybersecurity incidents and ensures incident response, disaster recovery, and resilience plans are maintained and tested. It partners with manufacturing and operations leaders to strengthen OT security, and works with Legal, Compliance, Internal Audit, and operational leaders to meet audit, regulatory, customer, and contractual requirements. Alkegen is a global specialty materials company focused on battery technologies, filtration media, and specialty insulation and sealing materials. It has over 60 manufacturing facilities and a global workforce of over 9,000. The company describes its culture as diverse and inclusive and states that employment decisions are made without regard to protected characteristics.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline.
12+ years of cybersecurity experience with increasing leadership responsibility.
5+ years leading enterprise cybersecurity programs within a complex global organization.
Demonstrated experience managing and governing MSSPs or large-scale IT managed service providers.
Experience defining cybersecurity strategy and security roadmaps.
Experience supporting manufacturing and operational technology environments.
Strong understanding of cloud, infrastructure, identity, data protection, and cyber risk management.
Proven ability to influence executive stakeholders and drive organizational change.

Nice To Haves

Master’s degree in Cybersecurity, Information Systems, Business, or a related field.
Experience leading cybersecurity programs within a global manufacturing organization.
Experience supporting cybersecurity during acquisitions, integrations, and business transformation initiatives.
Deep knowledge of NIST, ISO 27001, CIS Controls, Zero Trust architecture, and modern cyber defense frameworks.
Preferred certifications: CISSP, CISM, CRISC, CGEIT, GIAC certifications, or ISO 27001 Lead Implementer or Lead Auditor.
Ability to lead confidently in executive and board-level discussions, translate technical risk into business impact, build trust across functions, hold service providers accountable, and balance security transformation with operational realities.

Responsibilities

Develop and execute a multi-year cybersecurity strategy aligned with business objectives and risk appetite.
Establish cybersecurity roadmaps, investment priorities, and transformation programs; identify emerging threats, risks, and opportunities.
Advise the CIO and executive leadership, and drive continuous improvement in cybersecurity maturity, resilience, and readiness.
Lead enterprise cybersecurity governance, standards, policies, and control frameworks.
Oversee cyber risk assessments, mitigation programs, executive risk reporting, security metrics, and dashboards.
Ensure alignment with frameworks including NIST, ISO 27001, CIS, and applicable industry requirements; present risks and recommendations to senior leadership.
Govern managed security service providers by establishing expectations, accountability, escalation paths, performance measures, KPIs, SLAs, audits, and improvement initiatives.
Evaluate provider recommendations and maintain internal security capability to govern providers effectively.
Own enterprise security architecture and technology standards, and promote security-by-design across infrastructure, cloud, applications, data, identity, and operational technology.
Lead strategy for identity and access management, cloud security, data protection, email security, security operations, vulnerability management, network security, OT security, incident response, and resilience.
Coordinate executive response during significant cybersecurity incidents, maintain and test incident response, disaster recovery, and resilience plans, and lead executive communications and post-incident improvement.
Partner with manufacturing and operations leaders to define OT security standards, governance, and architecture and improve visibility, segmentation, access controls, and resilience across manufacturing sites.
Support internal and external audits and ensure controls meet regulatory, customer, and contractual obligations.
Partner with Legal, Compliance, Internal Audit, and operational leaders on security risk management, maintaining audit-ready processes and documentation.
Influence executive stakeholders, drive organizational change, develop strong teams, and foster accountability.