Vice President, Information Security - Identity, Governance, and Cyber Risk

Procter & Gamble•Cincinnati, OH

1d•$251,900 - $314,900•Onsite

About The Position

P&G is searching for a senior technical leader to join the company as the Vice President of Information Security – Identity, Data Protection & Governance. This role will lead the enterprise strategy for identity security, data protection, privileged access, cyber governance, and risk management. As a technical leader within P&G Information Security, you will be responsible for ensuring trusted access to enterprise systems and protecting critical information assets while balancing security, resilience, and business agility. This role requires strategic leadership, excellent understanding of security domains, deep technical acumen and proven organizational development skills. Responsibilities include defining and executing the global enterprise strategy for data protection, identity security, privileged access, governance and risk, and managing the operations of any related services or initiatives. This role owns the enterprise's identity and data protection programs as a unified discipline — ensuring the right people and systems have the right access to the right data, and that sensitive data is protected wherever it lives, moves, or is used. This IT Leader will work in close partnership across IT Functions including Cyber Defense, Infrastructure, Application Development, Data & AI, and Enterprise Architecture to strengthen cyber resilience while enabling business agility and innovation.

Requirements

15+ years of progressive cybersecurity leadership experience, including enterprise-scale ownership of identity, data protection, privileged access, governance, risk, and compliance programs.
Proven ability to influence executive stakeholders and drive enterprise-wide decisions across technology, digital, legal, risk, and business functions without direct authority.
Strong executive presence with the ability to translate complex cybersecurity risks and investments into clear business outcomes for senior leadership and board-level audiences.
Experience implementing Zero Trust architectures and applying identity, access, and data protection principles across complex cloud, on-prem, application, and data environments.
Strong understanding of Cyber Defense operations and how identity and data protection controls influence prevention, detection, response, and recovery.
Experience with regulatory and control frameworks such as NIST CSF, ISO 27001, PCI DSS, HIPAA, SOX, or similar.
Experience implementing modern GRC initiatives, including holistic risk management programs.
Experience with AI models to drive automation and resiliency, as well as defensive capabilities for Identity and Data Protection platforms.
Track record in building and managing global, high-performing information security teams.
Demonstrates humility and executive maturity by actively listening, seeking diverse perspectives, and fostering collaboration, constructive debate, and continuous learning.

Responsibilities

Strategically modernize enterprise identity and access capabilities, including identity governance, privileged access management, machine identity, cloud entitlements, authentication, and access lifecycle controls.
Define and execute a modern data protection strategy that enables secure business growth and AI adoption through data classification, data loss prevention, encryption, data security posture management, insider risk controls, and data-centric zero trust capabilities across the enterprise.
Strengthen cyber governance, risk, and control practices by aligning security priorities, operating models, metrics, and investment decisions to enterprise risk and business outcomes.
Build, develop, and inspire high-performing global teams across four hub regions, creating clear priorities, strong succession plans, and scalable operating models.
Understand priorities of senior executives and cross-functional partners by translating complex cyber risks, investments, and control priorities into clear business outcomes, roadmaps, and decisions.
Partner with Cyber Defense, Infrastructure, Application Development, Data & AI, and Enterprise Architecture to ensure identity and data protection controls strengthen prevention, detection, incident response, recovery, and enterprise cyber resilience.