YourLiebherrCareer: Regional Chief Information Security Officer (CISO), Americas

Liebherr•Newport News, VA

12h

About The Position

The Regional Chief Information Security Officer (CISO) for the Americas is the business-facing information security leader for North, Central, and South America. The role is the primary regional interface between the Americas’ businesses and Corporate Information Security (CIS), translating global security strategy, policies, standards, services, and programs into coordinated regional execution while communicating regional business requirements, regulatory considerations, risks, operational constraints, and implementation feedback to CIS. It provides regional governance, risk visibility, executive communication, cross-entity coordination, functional leadership, and implementation enablement. The role works through accountable business, technology, and security owners and does not replace responsibilities assigned to operational, technical, assurance, legal, privacy, product-security, or business owners. The position reports functionally to the Global CISO and disciplinarily to the Local Managing Director. It provides disciplinary supervision to employees formally assigned to the Regional CISO organizational unit and functional leadership for designated information security personnel across the Americas. Travel domestically and internationally is required as needed, and the role requires the ability to obtain and maintain a valid driver license and passport. Applicants must be legally authorized to work in the United States without current or future sponsorship.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Risk Management, Business Administration, or a related discipline, or an equivalent combination of education, training, certification, and relevant experience.
At least 10 years of progressively responsible information security, technology-risk, or cyber-governance experience.
At least five years in a leadership role within a complex, multinational, matrixed, or decentralized organization.
Strong knowledge of contemporary information security practices, governance, risk management, incident management, security technologies, and complex multinational operating environments.
Ability to analyze information, assess risk, support treatment planning and escalation, communicate risk to executives, and balance security expectations with business objectives.
Ability to establish roadmaps, coordinate cross-functional initiatives, track dependencies, measure progress, manage competing priorities, and drive issues to resolution.
Accuracy and thoroughness, clear recordkeeping and action tracking, and a commitment to continuous improvement.
Proficiency with executive reporting, collaboration, project and portfolio management, risk and compliance, data-analysis, presentation, and enterprise productivity platforms.
Experience with internationally recognized frameworks and standards such as ISO/IEC 27001, the NIST Cybersecurity Framework, and COBIT.
Strong negotiation, facilitation, presentation, and relationship-management skills, including the ability to build consensus across diverse regional and global stakeholders.
Ability to support cyber incident and crisis coordination, executive communication, tabletop exercises, and post-event improvement.
Ability to travel domestically and internationally as required.
Ability to obtain and maintain a valid driver license and passport.
Legally authorized to work in the United States without the need for current or future sponsorship.

Nice To Haves

CISSP, CISM, CISA, CRISC, or an equivalent internationally recognized information security or technology-risk certification.
Experience with executive and board-level communication.
Experience in cyber-risk governance, incident and crisis coordination, audit and compliance support, cross-cultural leadership, organizational change, technology resilience, or third-party security risk.
Experience in manufacturing or industrial environments, including OT, product security, supply-chain security, or similarly complex environments.
Familiarity with regulated and industrial environments.

Responsibilities

Implement the Global Information Security Strategy across the Americas, incorporating applicable regional business, regulatory, contractual, threat, language, and operational requirements; maintain a regional security roadmap and aligned priorities.
Develop and maintain the Americas regional operating model, governance practices, decision rights, escalation paths, and role boundaries among CIS, Corporate IT, divisional information security organizations, regional and local security personnel, legal entities, and business risk owners.
Provide functional leadership, coordination, and development for designated information security personnel across the Americas, and disciplinary leadership for employees assigned to the Regional CISO organizational unit.
Participate in the Information Security Board and other governance forums; represent and appropriately escalate regional risks, requirements, dependencies, unresolved gaps, and recommendations for material regional risks to the Global Risk Register.
Serve as the regional escalation and coordination point for information security inquiries, requirements, and demands; establish a process to capture, assess, consolidate, prioritize, route, and track requirements and recurring issues.
Coordinate regional information security support for audits, assessments, customer security questionnaires, certifications, and regulatory or contractual inquiries; help entities interpret findings, identify accountable owners, plan proportionate remediation, track dependencies, and escalate unresolved risks.
Lead regional information security risk governance by consolidating risk information across entities, facilitating business-oriented risk discussions, supporting the identification of accountable risk owners, coordinating treatment and escalation, and communicating business implications.
Coordinate regional business and leadership support during material cybersecurity incidents, connecting affected entities and leaders with responsible CIS incident-response capabilities and supporting escalation, decisions, communications, reporting, lessons learned, and follow-through.
Lead the Americas Regional Information Security Committee, including agenda development, executive pre-read materials, decisions, minutes, action tracking, and escalation of material topics; report on regional risk, compliance, program adoption, demands, incidents, projects, and blockers.
Support and deliver regional security awareness, education, and training measures, and contribute globally when requested.
Build and maintain relationships with regional and legal-entity leadership, business and process owners, Corporate IT, divisional security organizations, CIS domain leaders, privacy and legal stakeholders, internal audit, product and OT stakeholders, and external parties as required.
Identify and lead regional information security projects aligned with global strategy and regional business priorities; advise significant initiatives involving cloud adoption, digital transformation, new construction, OT and industrial environments, connected products, product cybersecurity, regulated environments, and major third-party engagements.
Coordinate regional readiness, adoption, measurement, and escalation for new or changing CIS capabilities, services, policies, standards, and programs.
Advise on secure-by-design considerations and coordinate identification of business-critical applications, products, technology services, and processes to support continuity, disaster recovery, resilience, tabletop exercises, and crisis preparedness.
Direct, coordinate, develop, and evaluate directly assigned Information Security employees in accordance with organizational policies and applicable law.
Where formal disciplinary authority applies, interview, hire, and train employees; plan, assign, and direct work; appraise performance; recognize or correct performance; address complaints; and resolve problems.
Provide performance and development input to local disciplinary managers for personnel under regional functional leadership, and collaborate with CIS domain leaders to align objectives, workload, development, and regional priorities.