Local Security Officer, NA; Cyber Security Officer

At Knorr-Bremse, our mission is to make mobility safer, more efficient, and better for the environment on roads and railways. This shared passion brings us together around the world and motivates us every day. Based in Munich, Knorr-Bremse Group is the global leader in braking systems and a top supplier of safety-related sub-systems for rail and commercial vehicles.

To support our growth and teamwork in North America, Knorr Brake Holding Corporation (KBHC) provides shared services for our truck and rail brands, such as Bendix CVS, Knorr Brake Company, KB Signaling, and New York Air Brake. When you join KBHC, you work with skilled and dedicated colleagues who share your sense of purpose. You will find meaningful opportunities, gain diverse experiences, and help achieve important goals across our North American truck and rail divisions.

Knorr Brake Holding Corporation is proud to be an Equal Employment Opportunity (EEO) employer. We are committed to providing equal opportunities to all qualified applicants, regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disability status, or genetic information.

This position is responsible for operating and enforcing Information Security Management System (ISMS) controls at the site level, ensuring alignment with corporate security strategy and regulatory requirements. Acting as the primary authority for cybersecurity and information security matters within the local entities to ensure compliance, manage risk, and promote a "secure by design" culture across all business processes.

• Serve as the primary point of contact for all information security and cybersecurity matters for the Americas locations.
• Implement, enforce, and monitor adherence to corporate and regional security policies, standards, and procedures.
• Integrate security requirements into local projects and change management processes to ensure secure-by-design practices.
• Maintain and manage ISMS/CSMS scope, Statement of Applicability, and site asset inventory.
• Conduct security risk assessments, maintain the risk register, and ensure mitigation actions are defined, approved, and implemented.
• Lead local security management reviews and support internal and external audits, ensuring ongoing compliance.
• Act as first responder and escalation point for security incidents and vulnerabilities.
• Coordinate incident handling with global security functions (e.g., CMDC, Operational Security teams) and external authorities where required.
• Oversee logical and physical access controls, including Joiner/Mover/Leaver (JML) processes.
• Ensure accuracy of asset inventories and enforce proper information handling practices.
• Manage contractor and visitor access and ensure adherence to physical and product security requirements.
• Conduct supplier security assessments and support third-party onboarding processes.
• Maintain and test business continuity (BC) and disaster recovery (DR) plans at the site level.
• Drive security awareness by ensuring completion of mandatory training and facilitating targeted awareness programs.
• Act as liaison for data protection and privacy functions to ensure compliance with applicable regulations (e.g., GDPR, NIS2).
• Provide regular reporting on security posture, risks, and incidents to regional and global security leadership.

• Solid understanding of Information Security Management Systems (ISMS) and security governance frameworks.
• International standards and regulations (e.g., ISO 27001, IEC 62443, NIS2, GDPR)
• IT and OT environments, including networks, systems, and access control mechanisms
• Risk management methodologies and audit practices
• Incident response, vulnerability…