Local Security Officer, NA (Cyber Security Officer)

Knorr-Bremse • Avon, OH

9d • Hybrid

About The Position

The Local Security Officer is responsible for operating and enforcing Information Security Management System (ISMS) controls at the site level, aligning local practices with corporate security strategy and regulatory requirements. The role serves as the primary authority and point of contact for cybersecurity and information security matters across Americas locations, helping ensure compliance, manage risk, and promote a secure-by-design culture across business processes.

The officer oversees local security governance, risk assessments, audits, incident response, access controls, supplier security, and site-level business continuity and disaster recovery planning. The role also coordinates with global security functions and external authorities where needed, supports data protection and privacy compliance, and reports security posture, risks, and incidents to regional and global security leadership. The position is hybrid and based in Avon, Ohio, with domestic and international travel of up to 25% required.

Requirements

• At least 5 years of professional experience in information security, cybersecurity, or a related field.
• Demonstrated experience managing or supporting ISMS frameworks and compliance initiatives.
• Experience with risk assessments, audits, and incident management processes.
• Experience working in cross-functional environments involving business, IT, and regulatory stakeholders.
• Strong understanding of ISMS and security governance frameworks.
• Knowledge of international standards and regulations, including ISO 27001, IEC 62443, NIS2, and GDPR.
• Knowledge of IT and OT environments, including networks, systems, and access control mechanisms.
• Knowledge of risk management methodologies, audit practices, incident response, vulnerability management, business continuity, data protection, and regulatory compliance.
• Strong communication skills and ability to engage effectively at all organizational levels, including executive leadership.
• Excellent interpersonal and stakeholder management capabilities.
• High integrity and discretion in handling sensitive and confidential information.
• Structured, analytical, and solution-oriented thinking, with a proactive and pragmatic approach to problem-solving and continuous improvement.
• Ability to work independently with a high level of accountability.
• Fluent written and spoken English.
• Must be able to travel domestically and internationally up to 25% of the time.
• Applicants must be authorized to work full-time in the United States without current or future employment-based visa sponsorship.

Nice To Haves

• Exposure to regulated industries or manufacturing environments, including OT.
• Experience working in an automotive or transportation environment.
• A bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; equivalent professional experience may be considered instead.

Responsibilities

• Serve as the primary point of contact for information security and cybersecurity matters for Americas locations.
• Implement, enforce, and monitor adherence to corporate and regional security policies, standards, and procedures.
• Integrate security requirements into local projects and change management to support secure-by-design practices.
• Maintain and manage ISMS/CSMS scope, the Statement of Applicability, and site asset inventory.
• Conduct security risk assessments, maintain the risk register, and ensure mitigation actions are defined, approved, and implemented.
• Lead local security management reviews and support internal and external audits.
• Act as first responder and escalation point for security incidents and vulnerabilities.
• Coordinate incident handling with global security functions and external authorities where required.
• Oversee logical and physical access controls, including Joiner/Mover/Leaver processes.
• Ensure accurate asset inventories and proper information-handling practices.
• Manage contractor and visitor access and ensure compliance with physical and product security requirements.
• Conduct supplier security assessments and support third-party onboarding.
• Maintain and test site-level business continuity and disaster recovery plans.
• Promote security awareness by ensuring completion of mandatory training and facilitating targeted programs.
• Liaise with data protection and privacy functions to support compliance with applicable regulations.
• Provide regular reporting on security posture, risks, and incidents to regional and global security leadership.

Benefits

• Group healthcare plans, including medical, dental, vision, and basic life and disability insurance, subject to eligibility and plan documents.
• Company 401(k) plan.
• 120 hours of vacation leave annually.
• 40 hours of Personal Paid Absence annually.
• 12 paid holidays and 1 floating holiday.
• Six weeks of paid parental leave.
• Opportunity to purchase company stock, subject to plan documents.
• Annual bonuses based on specified metrics, of up to 4% of annual salary.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior