Head of Cyber Security Group

BIC•Shelton, CT

About The Position

Join BIC World, a community of brands dedicated to creating ingeniously simple and joyful products that have been part of hearts and homes for over 75 years. We are committed to growing our iconic and innovative brands by reimagining everyday essentials in new, sustainable, and responsible ways. Our culture encourages a "roll up your sleeves and get the job done" mindset, ensuring self-starters, problem solvers, and innovative thinkers can truly thrive. At BIC World, you are empowered to take ownership of your career and use your unique perspective to make a meaningful, global impact on our mission. We are seeking an experienced and strategic Global Cybersecurity Lead to lead, mature, and continuously improve our global cybersecurity program across a multinational manufacturing environment. Reporting directly to the Chief Information Officer (CIO), this leader will be responsible for defining and executing the company's cybersecurity strategy, protecting information assets, securing manufacturing operations, managing cyber risk, and driving the adoption of modern security technologies and best practices. The successful candidate will have a proven track record of delivering measurable improvements in cybersecurity capabilities, leading high-performing teams, and implementing effective security controls in complex global organizations. Particular expertise in network segmentation, identity and access management (IAM), and enterprise security architecture is required. This role will partner closely with business leaders, infrastructure, applications, manufacturing operations, legal, compliance, and external partners to ensure cybersecurity is integrated into all aspects of the organization.

Requirements

Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or related field.
Minimum 10 years of progressive cybersecurity experience.
Minimum 5 years leading cybersecurity teams and programs within medium to large global organizations.
Demonstrated success improving cybersecurity technologies, processes, and organizational maturity.
Experience operating within multinational organizations across multiple geographies.
Strong knowledge and hands-on leadership experience in: Identity and Access Management (IAM), Privileged Access Management (PAM), Network Security Architecture, Network Segmentation and Micro-Segmentation, Zero Trust Security Models, Security Operations and Incident Response, Vulnerability Management, Endpoint Security, Cloud Security (Microsoft Azure and/or AWS), Security Monitoring and SIEM Platforms, Cyber Risk Management, Operational Technology (OT) Security, GenAI security principles.
Strategic thinking and business acumen
Strong executive presence and communication skills
Ability to influence across organizational boundaries
Proven experience leading global teams
Strong analytical and problem-solving skills
Ability to drive change and continuous improvement
Crisis management and decision-making capabilities
Collaborative leadership style with a focus on accountability and results

Nice To Haves

Master's degree preferred.
Experience supporting manufacturing, industrial, or operational technology (OT) environments strongly preferred.
CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
CRISC (Certified in Risk and Information Systems Control)
CCSP (Certified Cloud Security Professional)
GIAC certifications
Microsoft Security certifications

Responsibilities

Develop and execute a comprehensive global cybersecurity strategy aligned with business objectives and risk appetite.
Serve as the senior cybersecurity advisor to the CIO, CFO, and executive leadership team.
Establish and maintain cybersecurity governance, policies, standards, and procedures.
Drive a culture of cybersecurity awareness and accountability across the organization.
Present cybersecurity posture, risks, incidents, and improvement programs to executive leadership.
Lead the continuous improvement of cybersecurity technologies, controls, and operational processes.
Develop multi-year cybersecurity roadmaps and investment strategies.
Establish security metrics and KPIs to measure program effectiveness.
Ensure alignment with industry frameworks such as NIST CSF, ISO 27001, CIS Controls, and relevant regulatory requirements.
Lead the strategy, implementation, and governance of identity security programs.
Oversee authentication, authorization, privileged access management (PAM), and identity governance processes.
Drive modernization initiatives including: Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Privileged Identity Management, Zero Trust security principles.
Lead the cybersecurity vision, requirements, standards, and risk management practices for network security and segmentation.
Collaborate with technology and business stakeholders to develop and mature segmentation strategies across corporate networks, manufacturing facilities, distribution centers, and cloud environments.
Partner with infrastructure and manufacturing operational technology (OT) teams to improve security boundaries and reduce attack surfaces.
Establish and monitor security standards to ensure appropriate segmentation and risk-based separation between IT and OT environments.
Oversee security monitoring, detection, incident response, and vulnerability management programs.
Direct investigations into cybersecurity incidents and coordinate response activities.
Ensure effective threat intelligence and threat-hunting capabilities.
Lead post-incident reviews and remediation efforts.
Identify, assess, and manage cybersecurity risks across the enterprise.
Lead cybersecurity audits, assessments, and compliance initiatives.
Manage third-party cybersecurity risk programs.
Support legal, privacy, and regulatory requirements applicable to global operations.
Lead the cybersecurity strategy, governance, and risk management framework for Generative AI (GenAI) and AI-enabled technologies across the enterprise, providing expert guidance on the secure evaluation, adoption, and deployment of AI solutions. Establish and enforce AI security best practices, including data protection, identity and access controls, model governance, third-party AI risk assessments, prompt and data leakage prevention, regulatory compliance, and alignment with responsible AI principles to enable innovation while managing organizational risk.
Build, develop, and lead a high-performing cybersecurity organization.
Provide coaching, mentoring, and career development for team members.
Manage cybersecurity budgets, vendors, consultants, and strategic partners.
Foster strong collaboration with global IT, business, and manufacturing teams.