Vice President, Information Security & Infrastructure

Hayward Holdings, Inc.•Charlotte, NC

About The Position

Hayward Holdings Inc. is seeking an enterprise executive to define and lead its global cybersecurity, technology infrastructure, cloud, end-user technology, and data protection strategy. The Vice President establishes the vision, operating model, architecture, policies, standards, and governance needed to protect company information assets while delivering secure, reliable, scalable, and cost-effective technology services that enable business growth, operations, and innovation. The role leads security across Hayward’s technology ecosystem, including Operational Technology (OT), Industrial Control Systems (ICS), IoT, manufacturing environments, and connected products. The Vice President advises executive leadership and the Board of Directors on cyber risk, security posture, and resilience; leads enterprise security controls, threat protection, identity and access management, security awareness, vendor risk, incident preparedness, disaster recovery, and business continuity; and ensures the organization can demonstrate compliance with applicable regulations, public-company controls, and recognized industry standards. The role also directs infrastructure, cloud, network, and end-user computing and support. The position is accountable for the security, availability, performance, and operational effectiveness of Hayward’s technology environment and end-user experience. Hayward is a global manufacturer of residential and commercial pool and spa equipment, headquartered in Charlotte, North Carolina, with facilities in the United States and several countries worldwide.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field.
15+ years of progressive information security, cybersecurity, technology risk, compliance, or related experience, including substantial leadership responsibility in complex, global environments.
10+ years leading people, leaders, and multidisciplinary security teams.
Experience building and scaling a high-performing information security organization.
Demonstrated success managing cyber risk, compliance, and resilience for a public company or comparably regulated enterprise.
Experience advising executive leadership and presenting complex cyber risk matters to Boards of Directors or Board committees.
Experience developing and managing significant operating and capital budgets, strategic vendors, and enterprise security investments.

Nice To Haves

Master’s degree in Technology, Business Administration, or a related discipline.
Certified Information Systems Security Professional (CISSP).
Certified Information Security Manager (CISM).
Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), or equivalent credentials.

Responsibilities

Define and execute the global information security strategy, multi-year roadmap, operating model, and investment priorities aligned with business goals and risk appetite.
Advise executive leadership and the Board of Directors on cybersecurity risk, performance indicators, emerging threats, and material exposures.
Integrate security into enterprise technology strategy, digital products, business transformation, mergers and acquisitions, and global operations.
Establish enterprise cybersecurity accountability, decision rights, and governance forums.
Lead development of security architecture specifications, standards, and patterns across business environments, infrastructure, cloud, web, applications, and digital platforms.
Oversee security monitoring, threat detection, vulnerability management, penetration testing, endpoint and network protection, security event correlation, and incident response.
Ensure effective preventive, detective, and corrective controls protect the confidentiality, integrity, and availability of information assets.
Promote secure-by-design practices across technology delivery, software development, infrastructure, and product development.
Guide evaluation and implementation of security technologies, including firewalls, VPN, SIEM platforms, identity solutions, and cloud security controls.
Build and lead the enterprise information security assurance program, including goals, risk strategies, governance, metrics, and reporting.
Own security audit, compliance review, and external assessment strategy, including applicable SOX, GDPR, CCPA, and other requirements.
Oversee security policies, standards, procedures, control frameworks, exception management, and remediation governance.
Lead enterprise cybersecurity risk assessments and communicate material risks to appropriate executive, business, and Board audiences.
Align the security program with recognized frameworks and methodologies such as NIST, ISO 2700x, ITIL, COBIT, and relevant network defense methodologies.
Provide executive oversight of cybersecurity incident preparedness, response, escalation, crisis communications, recovery, and post-incident improvement.
Lead disaster recovery and business continuity for critical processes and systems, and ensure recovery objectives are defined, tested, achievable, and aligned with business requirements.
Drive scenario planning, tabletop exercises, recovery testing, and coordinated response practices across technology and business functions.
Define and lead enterprise Identity and Access Management strategy, including privileged access, authentication, authorization, access governance, and lifecycle controls.
Partner with Legal, Privacy, Internal Audit, Technology, and business leaders to protect sensitive data and support privacy obligations.
Champion a global security culture and direct security awareness programs addressing phishing, social engineering, acceptable use, policies, and emerging threats.
Use metrics, simulations, and risk trends to improve awareness program effectiveness and reduce human-related security exposure.
Own the information security vendor risk management program and oversee initial and periodic third-party risk assessments and remediation.
Partner with Procurement, Legal, Finance, Internal Audit, and business leaders on risk-based vendor decisions.
Develop and manage security capital and operating budgets, forecasts, business cases, and investment roadmaps; negotiate and administer strategic service agreements and vendor contracts.
Establish executive dashboards demonstrating performance, control effectiveness, risk reduction, investment outcomes, and program maturity.
Define and execute global infrastructure and cloud strategy, architecture, standards, roadmaps, and investment priorities.
Lead secure, reliable, scalable on-premises, cloud, network, compute, storage, and core infrastructure services.
Drive infrastructure modernization, cloud adoption, lifecycle management, automation, standardization, and technical debt reduction.
Establish performance, availability, capacity, resilience, and service-level expectations for critical infrastructure platforms, while optimizing cost and vendor partnerships.
Define and lead global end-user technology and support strategy, including devices, collaboration tools, software distribution, mobility, service desk, and field/site support.
Establish service-management standards, SLAs, performance metrics, and continuous improvement practices for end-user support.
Drive workplace technology standardization, lifecycle management, automation, and self-service capabilities, improving employee experience and technology adoption.
Build and lead a high-performing global information security organization, including internal security personnel and technical resources, third-party, vendor, and staff augmentation relationships.
Develop the leadership team, succession pipeline, operating capabilities, and technical depth of the function; foster collaboration, accountability, inclusion, continuous learning, and sound risk judgment.