Director, Global Cybersecurity - Governance, Risk, Compliance & Identity

USA Donaldson CompanyBloomington, MN
Onsite

About The Position

The Director, Global Cybersecurity Governance, Risk, Compliance & Identity is accountable for defining and executing Donaldson’s enterprise cybersecurity governance and risk management strategy, while ensuring a consistent, integrated control environment across IT, OT, and product ecosystems. Provide direct leadership of the global Governance Risk Compliance (GRC) function and responsibility for Identity & Access Management (IAM/ICAM) and Operational Technology (OT) Security programs, ensuring alignment to regulatory requirements, risk, and business objectives. Build and maintain strong partnerships across the enterprise to embed security operations & compliance requirements into platforms and processes; serve as an escalation point for high-impact events and customer/security assurance needs. As an advisor to executive leadership, this role drives decision-making across global manufacturing, digital transformation, and product innovation, strengthening Donaldson’s security while enabling the business.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Risk Management, or related field
  • 10+ years of progressive experience in cybersecurity, GRC, or identity management
  • Experience managing budgets and vendors, building multi-year roadmaps, and delivering measurable outcomes through program and portfolio management
  • Proven experience leading enterprise GRC functions
  • Strong working knowledge of NIST CSF, NIST 800-53, ISO 27001, and SOC frameworks
  • Experience with global regulatory and compliance programs (such as SOX, GDPR, PCI DSS, CMMC, TISAX)
  • Experience collaborating with IAM and/or OT security leadership in large-scale environments
  • Professional certifications (such as CISSP, CISM, CRISC, or CISA)
  • Demonstrated experience operating in complex, global organizations

Nice To Haves

  • Experience in global manufacturing, lab environment, or OT-intensive environments
  • Familiarity with Zero Trust, cloud security, and AI governance frameworks
  • Strong communication and board-level presentation capabilities
  • Proven ability to influence across matrixed IT, security, and business teams

Responsibilities

  • Integrate GRC, IAM, and OT security into a unified cybersecurity risk model
  • Support M&A due diligence and integration from a cybersecurity and compliance perspective
  • Develop, mentor, and retain a high-performing security operations organization, including hiring strategy, succession planning, performance management, and a culture of accountability and learning
  • Establish and maintain cybersecurity KPIs, KRIs, and dashboards
  • Advise leadership on risk, investment priorities, and regulatory exposure
  • Drive continuous improvement of the enterprise control environment
  • Direct leadership of the global GRC organization, including governance, risk management, compliance, and audit functions
  • Define and mature enterprise cybersecurity governance frameworks, policies, and standards
  • Establish an integrated risk management program spanning IT, OT, cloud, and third parties
  • Own regulatory, legal, and customer-driven compliance programs (e.g., SOX, GDPR, CMMC, and TISAX)
  • Oversee audits, regulatory engagements, and customer security assessments
  • Deliver cyber risk reporting and board-facing materials
  • Provide strategic oversight of the IAM/ICAM function, including identity lifecycle, access governance, and privileged access using SailPoint ISC as the core platform, powered by ServiceNow and other technologies.
  • Align IAM capabilities with Zero Trust architecture and security strategy
  • Drive identity risk through metrics, reporting, and control effectiveness
  • Partner with IAM leadership to ensure scalable, compliant identity services across global operations
  • Define, implement, and operate the use and impact of GenAI within IAM landscape along with use of GenAI in the ecosystem
  • Provide strategic oversight of OT cybersecurity strategy and governance across manufacturing, labs, and ICS environments
  • Apply consistent security controls and risk management practices across plants and lab environments
  • Partner with OT and manufacturing & technical leaders to embed security into system lifecycle and operations
  • Align OT security with regulatory, safety, and business continuity requirements

Benefits

  • health benefits
  • retirement plan (401k)
  • paid time away
  • paid leaves (including paid parental leave)
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service