Senior Director, Information Security

Landis+Gyr•Milton, GA

About The Position

The Senior Director of Information Security is the leader of the enterprise security program and the single point of accountability for the company’s security posture across IT, Operational Technology (OT), product, and customer-facing domains. This role acts as the primary liaison between the security organization and senior leadership, ensuring that security strategy is connected to business objectives and that cross-functional security teams operate in a coordinated, consistent manner. While several security functions are organizationally distributed across the Product, Software & Services (OT), and CTO organizations, this role holds end-to-end functional ownership of the security program and ensures these streams remain aligned to a single security strategy, risk appetite, and set of standards — with a global focus spanning IT and OT, manufacturing, cloud, and SaaS environments.

Requirements

Senior security leadership experience (typically 8+ years in security, with significant time in a leadership role) spanning enterprise IT and at least one of OT / product / SaaS security.
Demonstrated ability to lead in a matrixed environment, exercising influence over teams not under direct reporting lines.
Strong command of security governance, risk, and compliance, including external audit management across cloud, manufacturing, and SaaS contexts.
Hands-on understanding of SOC operations, incident response, threat management, secure SDLC, PKI, and identity.
Proven executive communication skills, including Board-level engagement.

Nice To Haves

Relevant certifications (e.g., CISSP, CISM, or equivalent) preferred.

Responsibilities

Own and continuously evolve the enterprise security strategy, roadmap, and operating model.
Serve as the connection point between executive leadership / the Board Audit and Risk Committee and the operational aspects of security, translating risk into business terms.
Establish and maintain enterprise-wide security policies, standards, and a common risk framework applied consistently across all streams.
Ensure cross-functional security teams are aligned, avoiding duplication and closing coverage gaps across IT and OT.
Own Security Operations: SOC, incident response, red team, and threat management, ensuring consistent incident management and response across IT and OT.
Own Information Security: security compliance and security audit management, including external audits across cloud, manufacturing, and SaaS environments.
Own Customer-facing operational security (IT-landed): customer security incident management and SaaS environment security as global functions, ensuring proper processes and adherence to legal and regulatory requirements.
Set standards, define requirements, and govern execution for security functions that land outside IT, while respecting each organization’s operating model.
Maintain a single, coherent security operating model and define the interfaces, RACI, and escalation paths between IT, Product, OT, and customer-facing functions.
Drive consistent standards, metrics, reporting, and maturity assessment across all streams, and champion a security culture across the organization.