TECHNICAL QUALIFICATIONS:

· Deep expertise with endpoint security tools, particularly CrowdStrike
· Proficiency with identity and access management via Okta
· Experience with KnowBe4 or similar platforms for user security training
· Familiarity with information security frameworks and standards such as ISO 27001, NIST, and CIS Controls
· Knowledge of applicable data privacy and protection regulations
· Experience in manufacturing environments, preferably multinational

SOFT SKILLS & LEADERSHIP ATTRIBUTES:

· Excellent written and verbal communication skills across all organizational levels
· Strong leadership and strategic thinking, with the ability to influence without authority
· Capable of driving security initiatives across departments without direct reports
· Comfortable presenting findings and recommendations to executives and cross-functional teams
· Adaptable and able to prioritize in a dynamic, evolving threat landscape

PREFERRED QUALIFICATIONS:

· Experience in the Consumer Packaged Goods (CPG) industry
· Exposure to managing cloud-based security tools and third-party risk
· Ability to scale the security function as the organization grows
· Bachelor’s degree in Computer Science, Information Security, or a related field (Master’s preferred).
· 5–7 years of experience in IT security or information security management.
· 2+ years in a supervisory or management role.

· Oversee the enterprise-wide information security program, ensuring the confidentiality, integrity, and availability of all systems and data
· Develop, implement, and enforce security policies, procedures, and standards
· Manage deployment, configuration, and optimization of CrowdStrike for endpoint detection and response (EDR)
· Oversee identity and access management efforts using Okta, including single sign-on (SSO) and multi-factor authentication (MFA)
· Lead risk assessments, vulnerability scans, and remediation strategies
· Respond to and investigate security incidents, coordinating appropriate mitigation plans
· Foster a security-conscious culture through regular user training and awareness programs, including KnowBe4
· Ensure compliance with relevant security regulations and frameworks (e.g., ISO 27001, NIST Cybersecurity Framework, data privacy laws)
· Collaborate with IT, compliance, and business units to align security strategies with business goals
· Provide guidance on third-party risk and cloud security tools
· Evaluate and manage security-related vendors and service providers