Davis-Standard is a global leader in extrusion and converting technology, with equipment operating at customer facilities around the world. We are seeking a Director of Security and Compliance to establish, lead, and mature the company’s global cybersecurity and compliance program. This is a strategic leadership role for a global manufacturing enterprise operating across North America, Europe, and Asia. The Director will build the security program, operationalize a managed SIEM/SOC service, strengthen cybersecurity governance, advance Zero Trust initiatives where appropriate, improve incident readiness, and lead compliance efforts including NIS2 readiness.
Key Responsibilities:
Lead and develop the global cybersecurity and compliance program across business units and manufacturing facilities, aligning strategy with NIST CSF, Zero Trust, and business risk priorities.
Build and manage the Security and Compliance team, including two Cybersecurity Analysts, while overseeing external SIEM/SOC managed services.
Oversee security operations, threat detection, incident response, vulnerability management, and remediation efforts across enterprise systems.
Lead cybersecurity incident response, disaster recovery readiness, business continuity planning, and security risk assessments.
Strengthen identity and access management, endpoint security, and Zero Trust initiatives across Microsoft Entra ID, Active Directory, MFA, Intune, CrowdStrike, and related technologies.
Establish risk-based vulnerability management processes, including assessments, penetration testing, remediation tracking, and executive reporting.
Drive regulatory compliance and governance initiatives, including NIS2 readiness, security policies, third-party risk management, and audit preparation.
Partner with IT, Infrastructure, Applications, and global manufacturing teams to integrate security into technology projects, acquisitions, and operational processes.
Communicate cybersecurity risks, program performance, and strategic recommendations to executive leadership and key stakeholders.
Qualifications:
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.10+ years of progressive experience in cybersecurity, information security, IT risk, compliance, or related technology leadership. Proven experience leading cybersecurity programs encompassing security operations, incident response, vulnerability management, identity/access security, and governance. Strong knowledge of cybersecurity frameworks and standards, including NIST CSF, Zero Trust, ISO 27001, CIS Controls, and NIS2.Hands-on technical understanding of Microsoft 365, Entra ID, Active Directory, CrowdStrike, Intune, SIEM/SOC, EDR/XDR, MFA, and cloud/network security. Experience working in global manufacturing, industrial, multi-site, or private-equity-backed environments. Familiarity with OT/industrial cybersecurity, manufacturing systems, and global regulatory compliance. Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSP, or GIAC are a plus.
