Vice President & Chief Information Security Officer; CISO

Vice President & Chief Information Security Officer (CISO) page is loaded## Vice President & Chief Information Security Officer (CISO) locations:
Cincinnati, OH, USA:
Hillenbrand Corporate time type:
Full time posted on:
Heute ausgeschriebenjob requisition :
R-8026
*
* Location:

** Cincinnati, OH (Preferred)
• Kansas City, MO
• Pitman, NJ  
*
* Reports to:

** Chief Information Officer (CIO)  
** Company:
** Global Industrial Manufacturing ($3B Revenue)  
** Team:
** 12 global employees (USA, Germany, India)  
** Budget:** $3M Opex
** Position Overview
** The Vice President & Chief Information Security Officer (CISO) is the senior-most leader responsible for the global Information Security program. This role sets the strategy, establishes governance, oversees execution of technical and operational controls, and ensures the protection of the company’s data, systems, and digital assets across a complex global manufacturing environment.

The CISO leads a distributed team across the U.S., Germany, and India, and partners closely with IT, Legal, Compliance, and business leadership to manage cyber risk, secure new technologies, and meet regulatory and customer expectations. This role presents quarterly to the Audit Committee and Executive Management Team on cybersecurity posture, risks, and key initiatives.
** Key Responsibilities
**** Strategic Leadership & Governance
*** Develop and execute the global information security strategy aligned to business objectives and risk appetite.
* Provide quarterly cybersecurity updates to the Audit Committee and Executive Management Team.
* Establish security governance, policies, and standards consistent with leading frameworks (NIST CSF, ISO 27001, CIS).
* Oversee enterprise risk assessments and maintain a risk-based roadmap for continuous improvement.
** Security Operations & Technical Controls
*** Lead the design, implementation, and management of all security technologies and controls including endpoint protection, identity & access management, SIEM/SOC operations, cloud security, vulnerability management, and network security.
* Ensure proactive monitoring, rapid detection, and response to security incidents across global operations.
* Oversee business continuity and disaster recovery security components in partnership with Infrastructure and Applications teams.
** Security Architecture & New Technology Reviews
*** Embed security-by-design into IT and business projects, including cloud, ERP, operational technology (OT), and Industry 4.0 initiatives.
* Conduct architectural reviews and threat modeling for new technologies and digital transformation efforts.
** Compliance, Privacy & Legal Collaboration
*** Partner closely with Legal to ensure compliance with global data privacy laws, including GDPR, CCPA, and emerging regulations.
* Oversee data protection practices, records retention security considerations, and reporting obligations related to data privacy incidents.
** Third-Party & Customer Security
*** Lead the global third-party risk management program, including supplier assessments and ongoing monitoring.
* Respond to and manage customer security inquiries, audits, and contractual security requirements.
* Drive vendor governance for security tools, MSSP partnerships, and other outsourced services.
** Team Leadership & Budget Management
*** Lead a global Information Security team of 12 across the U.S., Germany, and India.
* Manage a $3M annual operating budget, ensuring cost-effective investments in technology, services, and capabilities.
* Mentor, develop, and scale the team to support global manufacturing operations and business growth.
** Qualifications
* *** Required
* ** 10+ years of progressive experience in Information Security leadership roles.
* Minimum 3 years as a CISO
** or
* * a deputy/second-in-command security leader in a larger enterprise.
* Deep expertise in security operations, architecture, governance, risk, compliance, and incident response.
* Strong working knowledge of NIST CSF, ISO 27001, CIS Controls, and modern cybersecurity technologies.
* Experience in global environments and working with distributed teams.
* Demonstrated ability to present complex cybersecurity topics to…