Vice President, Information Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Vice President, Information Security - Manufacturing Plant Security, Product Security & Application Security based in the United States.

This executive leadership role will shape and execute a global information security strategy spanning manufacturing, connected products, and application engineering.

• Define and lead the global information security strategy and execution across manufacturing plant security, product security, and application security.
• Lead OT/ICS security strategy across manufacturing environments worldwide, establishing effective protections, governance, risk management, and security standards.
• Own product security strategy for connected and IoT-enabled digital health products, including cybersecurity requirements throughout the product lifecycle.
• Oversee compliance with applicable FDA medical device cybersecurity requirements, including premarket submissions and post-market vulnerability management.
• Lead application security across engineering organizations, strengthening CI/CD pipeline security, DevSecOps practices, and modern application security governance.
• Establish appropriate security controls and governance for AI-assisted software development tools and emerging development technologies.
• Build, lead, and develop a global team of security leaders and embedded professionals across multiple operating companies and geographic regions.
• Partner with operating company presidents, plant leaders, product executives, engineering leaders, and other senior stakeholders to embed security into business operations.
• Establish and maintain a consolidated risk management framework covering manufacturing, product, and application security.
• Define meaningful security metrics, monitor risk exposure, and provide clear executive-level reporting on security posture and priorities.
• Represent the organization's information security strategy and risk posture to executive leadership, audit committees, risk committees, and other senior governance bodies.
• Drive consistency and continuous improvement across a decentralized, multi-business-unit security environment.
• Travel regularly to manufacturing, R&D, and operating company locations to assess priorities, strengthen relationships, and support global security execution.

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related discipline, or equivalent professional experience.
• 12+ years of information security experience, including direct ownership of manufacturing/OT security, product security, application security, or closely related functions within a global organization.
• Demonstrated leadership experience across multiple layers of management in complex, multi-site and multinational organizations.
• Significant experience with manufacturing plant security and OT/ICS environments, including application of frameworks such as IEC 62443 or NIST 800-82.
• Strong knowledge of medical device cybersecurity, including FDA premarket requirements under Section 524B of the FD&C Act and post-market vulnerability management.
• Proven experience with modern application security practices and tooling, including CI/CD security, DevSecOps, SAST, DAST, SCA, and cloud-native application security.
• Experience operating effectively within organizations spanning 50 or more countries and multiple business units.
• Strong executive presence and the ability to communicate complex security risks and strategies to business and technology leaders.
• Demonstrated ability to influence senior stakeholders and integrate security requirements into operational and commercial priorities.
• Exceptional strategic thinking, organizational leadership, risk management, and decision-making skills.
• Strong ability to develop talent, establish high-performing teams, and lead through organizational complexity and change.
• Professional certification such as CISSP, CISM, or GICSP is preferred.
• Experience working in a diversified, decentralized, multi-business-unit organization is a plus.
• Experience presenting to boards, audit committees, or executive risk committees is preferred.
• Ability and willingness to travel domestically and internationally up to 30% of the time.

• Annual salary range of $250,000–$350,000, depending on applicable factors and role considerations.
• Eligibility for bonus and incentive compensation.
• Comprehensive medical, dental, and vision insurance.
• 401(k) retirement benefits.
• Paid time off.
• Broad employee benefits designed to support health, financial well-being, and life beyond work.
• Remote work arrangement within the United States.
• Opportunity to lead global security initiatives across manufacturing, digital health, connected products, and software engineering.
• High-visibility executive role w