CISO Director - Information Security

Overview

About the job SUMMARY The Director of Security is a strategic leader responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role will report directly to the VP-IT; CIO and will be responsible for directing staff in identifying, developing, implementing, and maintaining processes across the organization to reduce information and information technology (IT) risks, respond to incidents, establish appropriate standards and controls, manage security technologies, and direct the establishment and implementation of policies and procedures.

Leads Subaru's IT technological strategies in support of the company's mission and core objectives, providing leadership, vision, and management of IT Teams. Ensures the effective operation of all IT systems and functions. Accountable for the management, mentoring, and career development of the IT staff members.

• Strategic Planning and Financial Oversight
• Lead and maintain a culture of security across all employees.
• Develop and maintain a comprehensive cloud security strategy aligned with organizational objectives and cloud strategy.
• Align IT and business strategy with thought leadership and innovation; design and execute multi-year road maps to transform the SOA environment and collaborate with SOA, S , and Subaru entities for efficiencies.
• Develop strategic annual and long-term plans and operational budgets for responsible IT areas.
• Track implementations to ensure financial and service targets are met according to timelines.

• Leadership and Operations Management
• Create a security strategy and roadmap to drive the organization towards a more secure future.
• Direct and manage IT department activities and operations; lead multiple teams and consultants through prioritization and project delivery.
• Provide motivational career development and assessment of team members.
• Foster a diverse, inclusive team while encouraging Subaru’s Love Promise.

• Service Delivery and Stakeholder Management
• Drive the incident response plan with leadership following a well-rehearsed process during cyber events.
• Oversee and negotiate service level agreements with internal and external stakeholders.
• Track service delivery to ensure targets and standards are met.
• Direct relationships with vendors; ensure vendors meet SOA objectives, SLAs, and deliverables on time and within budget.
• Interact with major suppliers; oversee RFPs, bids, contracts, and service agreements.

• Project Planning and Resource Allocation
• Direct the design and implementation of secure, scalable, reliable, and cost-effective security solutions.
• Determine ROI of IT projects; prioritize scheduling and implementation of major IT projects for efficient resource use.
• Identify IT resources required to meet defined objectives.
• Promote continuous improvement and act as change agent for new technologies and processes in the SOA environment.
• Oversee creation and maintenance of policies and procedures that protect the organization’s computing infrastructure and data.

• Policy Development and Implementation
• Collaborate with Legal and Compliance teams to ensure regulatory compliance.
• Advocate changes in other departments to ensure security policy compliance.
• Plan, produce, and implement information and SOA technology policies, procedures, and regulations.

• Disseminate company changes and significant events to IT staff; foster an inclusive environment.
• Advocate for change initiatives and lead the implementation of innovative ideas within IT and across the organization.
• Enforce data trust and enablement security measures to protect the company’s information.
• Stay informed of emerging technologies and industry trends.
• Assist in recruiting, hiring, and training of IT support staff to ensure required skills and knowledge.

• Demonstrated senior-level IT management experience, adept at shaping and executing complex IT strategies.
• Executive presence in gaining consensus across all parties.
• Proven track record managing budgets ranging from $4 million to $10 million.
• Ability to articulate intricate technical concepts to non-technical stakeholders clearly.
• Proficient in leading multiple IT disciplines including software development, technical support, and systems architecture; strong project management.
• In-depth understanding of computer systems, applications, operating systems, and data security protocols; ability to ensure systems are secured.
• Strong negotiation skills and a collaborative approach with third-party IT partners.
• Critical thinking and decision-making; advanced problem-solving for complex IT landscapes.

Work Environment:
Hybrid Role - Remote work 2 days per week (after 90 days) [Wednesdays & Fridays]

Travel Requirements: 15% Domestic

• BA/BS in Information Technology, Business Development, or related field required.
• Master’s Degree in Information Technology, Business…