Chief Information Security Officer

Chief Information Security Officer page is loaded## Chief Information Security Officer locations:
Durham, North Carolina time type:
Full time posted on:
Posted 2 Days Agojob requisition :
26-58

We are seeking a Chief Information Security Officer (CISO) with a global vision to build and lead our cybersecurity and information assurance strategies. The CISO will play a pivotal, leadership role in driving innovative strategies for protecting our intellectual property, customer data, and digital assets from cyber threats. The CISO needs to build a strong “security-first” culture across the organization to ensure that security is at the centre of all products and services.

This position requires a strong understanding of the semiconductor industry, strategic capabilities that can align our cybersecurity strategy and practices with our business model, objectives, and the risk universe we operate within globally. The role requires a blend of innovative thinking to lead our company staying ahead of the ever-evolving threat landscape, along with strategic planning, technical expertise, and leadership –  to ensure our information security posture is robust and resilient against evolving cyber risks.

The ideal candidate will have a proven track record in developing and implementing comprehensive security programs in High Tech or Semiconductor manufacturing environments.
*
* Key Responsibilities:

*** Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program at a global scale –  to ensure the integrity, confidentiality, and availability of information owned, controlled, or processed by the organization, including secrets, patents, and proprietary designs
* Lead the enterprise's information security organization, including hiring, training, and mentoring a team of security professionals.
* Identify, evaluate, and report on information security risks timely, and in a manner that meets Executive Management and the Board’s expectations, meets the compliance and regulatory requirements, and aligns with and supports the risk posture of the enterprise.
* Design and implement protective measures for securing proprietary designs, patents, and other sensitive corporate information, considering the unique risks present in the semiconductor industry, given innovation and IP contributes materially to our company’s competitive advantage.
* Work directly with the business units to facilitate risk assessment and risk management processes, and work with stakeholders throughout the enterprise on identifying acceptable levels of residual risk.
* Ensure cybersecurity policies are in alignment with Enterprise business policies, IT policies and the global Enterprise Risk Management framework for Wolfspeed.
* Develop and manage information security budgets and adopt cost-effective expense strategies and practices – to reduce and mitigate identified risks.
* Establish and oversee the implementation of a cybersecurity incident management program that includes incident detection, response, mitigation, and recovery processes.
* Effectively align cybersecurity practices with overall crisis management and incident response strategies, test plans and tabletop exercises – to ensure business continuity for Wolfspeed in the event of a worst-case disaster scenario, whether or not triggered by a security incident.
* Liaise with external agencies, such as law enforcement and other advisory bodies as necessary, to ensure that the organization maintains a strong security posture against external threats.
* Conduct regular security audits, risk assessments, support annual financial and IT audit objectives, and ensure compliance with industry standards and regulatory requirements specific to the semiconductor industry.
* Champion cybersecurity awareness and training programs globally, across all levels of the organization.
** Ideal

Qualifications:

*** Bachelor's or Master's degree in Information Security, Computer Science, or related field.
* Professional security management certification, such as a CISSP, CISM, or similar.
* 15+ years of experience in a combination of risk management, information…