DIRECTOR, INFORMATION SECURITY

We’re seeking an experienced Director, Information Security to lead data privacy, compliance, and cybersecurity initiatives. The Director, Information Security will ensure our adherence to global data protection regulations (e.g., GDPR, CCPA, HIPAA, DFAR, CMMC) while implementing robust security frameworks (ISO 27001, NIST, SOC 2). This role will also be responsible for our Data Privacy Management Platform, ensuring secure and compliant data handling across digital platforms, customer data systems, and marketing technologies.
The ideal candidate has deep expertise in data governance, access controls, privacy impact assessments (PIAs), and third-party risk management. They will lead our efforts in integrating privacy-by-design principles into software development, ensuring that security and compliance are embedded across all business operations.

• Oversee and manage our Data Privacy Management Platform, ensuring compliance with privacy laws and security best practices.
• Develop and enforce privacy and security policies for our customer data platforms (CDPs), identity management systems, and digital marketing technologies.
• Ensure compliance with GDPR, CCPA, HIPAA, and other global privacy frameworks, working closely with Legal, IT, and Marketing teams.
• Lead incident response, breach management, and regulatory reporting, ensuring adherence to data breach notification laws.
• Conduct privacy impact assessments (PIAs) and risk assessments for new technologies and data initiatives.
• Secure engineering processes and the software development lifecycle by implementing security measures such as code review, vulnerability testing, security education, and establishing DevSecOps practices.
• Oversee third-party Information Security risk management, ensuring vendor compliance with our security and privacy requirements.
• Lead security awareness and training programs for employees, contractors, and partners.
• Regularly report on security risks, compliance status, and emerging threats.
• Work with Canon Americas affiliates leadership on enterprise-wide security policies and data privacy management solutions.