Regional Information Security Officer

🕒 September 10

🗽 New York – Remote

🗽 New York – Remote

💵 $136k - $170k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ZEISS Group

WebsiteLinkedInAll Job Openings

10,000+ employees

🏭 Manufacturing

🏥 Healthcare

🧬 Biotechnology

Manufacturing • Healthcare • Biotechnology

ZEISS Group is a global technology leader specializing in optics and optoelectronics, with a rich history dating back to 1846. Headquartered in Oberkochen, Germany, ZEISS operates in four main segments: Semiconductor Manufacturing Technology, Industrial Quality & Research, Medical Technology, and Consumer Markets. The company generated annual revenue of 10 billion euros and employs around 43,000 people across nearly 50 countries, including a robust network of production sites, sales and service companies, and research & development facilities. ZEISS’s specialties include binoculars, microscopy, eyeglass lenses, biomedical research, and various advanced technologies such as artificial intelligence and machine learning.

📋 Description

• Serve as an independent 2nd Line-of-defense representing Corporate Information Security in the region • Design and drive information security policies, standards, and processes • Review and interpret CSOPs, SSOPs, and other information-security documents and directives • Direct regional security teams in implementing and improving security standards and processes • Communicate and coordinate information security strategy, programs, and services with business stakeholders • Monitor and improve regional security posture and maturity • Advise on least privilege, need-to-know, security-by-design, and security-by-default principles • Ensure M&A projects and post-merger integrations comply with ZEISS security standards • Review security concepts for central business-supporting functions and regional demands • Address regional incident tickets and service requests • Participate in security risk management and aggregation of first-line risks • Support regional incident response and drive closure of gaps and vulnerabilities • Collaborate with CIRT/SOC, CIT, regional IT, local IT, and Business IT during security incidents • Serve as the primary escalation contact for regional information security topics • Participate in CIDA for regional security incidents • Conduct regional investigations, eDiscovery, and digital evidence gathering and analysis • Coordinate litigation holds with HR and Legal • Assess and approve regional information security requirements, with veto rights for critical risks • Evaluate project risks and define security requirements, including for M&A integrations • Guide local security assessments and conduct on-site compliance visits • Support regulatory certifications and compliance, including CMMC, ISO 27001, TISAX, HIPAA, CyberEssentials, and NIS2 • Assess local regulatory requirements and advise on cybersecurity changes • Monitor regional information security status, KPIs, and KRIs • Identify business risks and mitigation strategies • Coordinate physical and facility security topics with Corporate Health & Safety • Support BISO review of information security contract amendments and security questionnaires • Recommend regional security awareness initiatives and support Corporate InfoSec programs

🎯 Requirements

• University degree in information security, information technology, engineering, cyber security, natural sciences, technology or similar • Minimum of 10 years of experience in information security, IT security, or a related field • Proven track record in a leadership role within information security, preferably in a regional or global capacity • Experience in a technology-driven industry, preferably manufacturing, healthcare, or another regulated sector • Knowledge of applicable international and regional regulatory requirements and standards in Cybersecurity and Data Protection • Hands-on experience with cybersecurity frameworks such as NIST and ISO 27001 • Experience with risk management methodologies • Experience managing security projects from inception to completion • Ability to prioritize tasks and manage multiple projects simultaneously • Experience working with cross-functional teams and engaging with senior leadership • CISSP certification would be beneficial

🏖️ Benefits

• Performance bonus or sales commissions • Medical plans • Vision • Dental • 401k Matching • Employee Assistance Programs • Vacation and sick pay • Retirement savings plan • Paid time off