Director, Information Security 1

Celestica International LP • Richardson, TX

24d • Onsite

About The Position

We are seeking an experienced and strategic Director of Data Security and Governance to lead our comprehensive data protection program. This critical role involves establishing and enforcing data security policies to meet stringent regulatory requirements, including the International Traffic in Arms Regulations (ITAR), and fulfilling complex data security obligations within commercial contracts. You will be responsible for building our data governance framework from the ground up, including implementing a robust data classification program and deploying modern security solutions like Data Security Posture Management (DSPM) and Data Rights Management (DRM), in addition to managing the DLP program.

Requirements

• Minimum of 10 years of experience in cybersecurity and data governance, with at least 4 years in a leadership role.
• Proven track record of successfully implementing a data classification program across an enterprise.
• Direct experience with the procurement and deployment of DSPM and DRM technologies.
• Experience in a manufacturing environment.
• Deep understanding of data protection principles, including encryption, access control, data loss prevention (DLP), and data discovery.
• Expert knowledge of security frameworks such as NIST Cybersecurity Framework, NIST 800-171, and ISO 27001.
• Excellent project management skills and the ability to lead cross-functional teams.
• Strong communication skills, with the ability to articulate complex security concepts to technical and non-technical audiences.

Nice To Haves

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Privacy Professional (CIPP)
• A Master's degree is a plus.

Responsibilities

• Design, implement, and oversee the enterprise-wide data security and governance strategy, policies, and standards.
• Serve as the primary expert on data security requirements for ITAR and other government regulations. Ensure all data handling processes and systems are compliant with contractual and legal obligations.
• Develop and manage a corporate data classification policy and program. Work with business units to identify, classify, and protect sensitive and regulated data throughout its lifecycle.
• Lead the selection, implementation, and operationalization of a Data Security Posture Management (DSPM) solution to provide visibility and control over our data landscape.
• Implement and manage a DRM solution to control access to and usage of sensitive data, ensuring that only authorized individuals can access and interact with protected information according to defined policies.
• Conduct regular data security risk assessments, identify vulnerabilities, and oversee remediation efforts to mitigate risks.
• Develop and lead the data-focused components of the incident response plan, including containment, investigation, and reporting of data breaches.
• Partner closely with Legal, IT, Engineering, and business stakeholders to embed data security principles into their operations. Develop and deliver training programs to raise awareness about data governance and security best practices.

What This Job Offers

• Job Type: Full-time
• Career Level: Director