Regional Chief Information Security Officer (CISO), AmericasNewport News, VA

The Regional Chief Information Security Officer (CISO) Americas is the business-facing information security leader for North, Central, and South America and serves as a primary regional interface between the Americas’ businesses and Corporate Information Security (CIS). The role translates global security strategy, policies, standards, services, and programs into coordinated regional execution while representing regional business requirements, regulatory considerations, risks, operational constraints, and implementation feedback within CIS. The Regional CISO provides regional governance, risk visibility, executive communication, cross-entity coordination, functional leadership, and implementation enablement. The role works through accountable business, technology, and security owners and does not replace operational, technical, assurance, legal, privacy, product-security, or business-ownership responsibilities assigned elsewhere. The role reports to Global CISO for functional and Local Managing Director as disciplinary lead.

• * For consideration, all candidates must apply through our online career portal to be considered for this opportunity. Please note that resumes submitted via email will not be reviewed.
• * This position is not eligible for sponsorship. Applicants must be legally authorized to work in the United States without the need for current or future sponsorship.

Responsibilities

Essential Job Duties:

• Implement the Global Information Security Strategy across the Americas while incorporating applicable regional business, regulatory, contractual, threat, language, and operational requirements; maintain a regional security roadmap, priorities, and implementation approach aligned with CIS direction.
• Develop and maintain the Americas regional operating model, governance practices, decision rights, escalation paths, and role boundaries among CIS, Corporate IT, divisional information security organizations, regional and local security personnel, legal entities, and business risk owners.
• Provide functional leadership, coordination, and development for designated information security personnel across the Americas, and disciplinary leadership for employees formally assigned to the Regional CISO organizational unit.
• Participate in the Information Security Board (ISB) and other applicable governance forums, ensuring regional risks, requirements, dependencies, and unresolved gaps are represented and escalated appropriately, including recommendation of material regional risks for inclusion in the Global Risk Register.
• Serve as the regional escalation and coordination point for information security inquiries, requirements, and demands originating within the Americas or from CIS to the region; establish a demand-management approach to capture, assess, consolidate, prioritize, route, and track requirements and recurring issues.
• Coordinate regional information security support for audits, assessments, customer security questionnaires, certifications, and regulatory or contractual inquiries; assist entities in interpreting findings, identifying accountable owners, developing proportionate remediation plans, tracking dependencies, and escalating unresolved risks.
• Lead regional information security risk governance by consolidating risk information across entities, facilitating business-oriented risk discussions, supporting identification of accountable risk owners, coordinating treatment and escalation activities, and translating security matters into operational, financial, regulatory, customer, and business-resilience implications.
• Serve as the regional business and leadership coordination point during material cybersecurity incidents; connect affected entities and leaders with responsible CIS incident-response capabilities and support escalation, decision coordination, stakeholder communication, reporting alignment, lessons learned, and post-incident follow-through.
• Lead and steer the Americas Regional Information Security Committee, including agenda development, executive pre-read materials, decisions, post-meeting minutes, action tracking, and escalation of material topics; provide executive reporting on regional risk, compliance, program adoption, demands, incidents, projects, and blockers.
• Support and deliver security awareness, education, and training measures across the region, and globally when requested.
• Build and maintain trusted relationships with Regional Managing Directors, legal-entity leadership, business and process owners, Corporate IT, divisional information security organizations, CIS domain leaders, privacy and legal stakeholders, internal audit, product and OT stakeholders, and external parties when required.
• Identify and lead regional information security projects aligned with the Global Information Security Strategy and regional business priorities; provide consultation for significant initiatives involving cloud adoption, digital transformation, new construction, OT/industrial environments, connected products, product cybersecurity, regulated environments, and major third-party engagements.
• Coordinate regional readiness, adoption, measurement, and escalation for new or changing Global CIS capabilities, services, policies, standards, and programs; advise on secure-by-design considerations and coordinate identification of business-critical applications, products, technology services, and processes to support continuity, disaster recovery, resilience, tabletop exercises, and crisis preparedness.

Supervisory Duties:

• Provide disciplinary supervision for employees formally assigned to the Regional CISO organizational unit and functional leadership for designated information security personnel across the Americas.
• Responsible for the direction, coordination, development, and evaluation of directly assigned Information Security employees in accordance with organizational policies and applicable law.
• Where formal disciplinary authority applies, supervisory responsibilities may include interviewing, hiring and training employees; planning, assigning and directing work; appraising performance; recognizing or correcting performance; addressing complaints; and resolving problems.
• Provide structured performance and development input to local disciplinary managers for personnel under regional functional leadership, where applicable, and collaborate with CIS domain leaders to align objectives, workload, development, and regional priorities.

Competencies

Education and Experience:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Risk Management, Business Administration, or a related discipline, with at least 10 years of progressively responsible information security, technology-risk, or cyber-governance experience, including at least five years in a leadership role within a complex, multinational, matrixed, or decentralized organization; or an equivalent combination of education, training, certification, and relevant experience.
• CISSP, CISM, CISA, CRISC, or an equivalent internationally recognized information security or technology-risk certification is strongly preferred.
• Preferred experience includes executive and board-level communication; cyber-risk governance; incident and crisis coordination; audit and compliance support; manufacturing or industrial environments; cross-cultural leadership; organizational change; technology resilience; and third-party security risk.

Position Specific Competencies:

• Job Skills: Applies broad and deep knowledge of contemporary information security practices, governance, risk management, incident management, security technologies, and complex multinational operating environments.
• Problem Solving and Risk Governance: Gathers and analyzes information skillfully; assesses risk; supports treatment planning, escalation, and executive risk communication; and balances security expectations with business objectives.
• Program and Project Leadership: Establishes roadmaps, coordinates cross-functional initiatives, tracks dependencies, measures progress, manages competing priorities, and drives issues to resolution.
• Quality and Accountability: Demonstrates accuracy and thoroughness, maintains clear records and action tracking, and seeks continuous improvement in regional security outcomes.
• Technology and Analytical Skills: Proficient with executive reporting, collaboration, project and portfolio management, risk and compliance, data-analysis, presentation, and enterprise productivity platforms; interprets risk, incident, audit, vulnerability, demand, adoption, and program-performance information for business decisions.
• Frameworks and Standards: Experienced with internationally recognized frameworks and standards such as ISO/IEC 27001, NIST Cybersecurity Framework, and COBIT; familiarity with regulated and industrial environments is beneficial.
• Executive and Stakeholder Leadership: Demonstrates strong negotiation, facilitation, presentation, and relationship-management skills and builds consensus across diverse regional and global stakeholders.
• Manufacturing and Industrial Context: Experience with manufacturing, industrial operations, OT, product security, supply-chain security, or similarly complex environments is preferred.
• Crisis Management: Demonstrates the ability to support cyber incident and crisis coordination, executive communication, tabletop exercises, and post-event improvement.

Additional Requirements:

• Travel domestically and internationally as required to support entities, leadership engagements, governance, audits, projects, incidents, and other regional responsibilities.
• Ability to obtain and maintain a valid driver license and passport.

Our Offer

Pay Range: $175,000.00 - $225,000.00

An interesting and ambitious role in a successful international company. We offer a secure work environment with a comprehensive benefits package that includes major medical, dental and vision insurance, 401K plan with company match, paid vacation and personal days and competitive salary.

Have we awoken your interest? Then we look forward to receiving your online application. If you have any questions, please contact Jose Matrille.

Liebherr-America, Inc. and its US affiliates are Equal Opportunity Employers. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.
If you are a California resident, please visit Liebherr USA, Co. Privacy Statement for more information regarding how Liebherr-America, Inc. and its US affiliates collect and process your personal information.

One Passion. Many Opportunities.