Executive Director, Deputy Chief Information Security Officer (Deputy CISO)

Company Overview

Bridgestone Americas, Inc. (BSAM), headquartered in Nashville, Tennessee, and Bridgestone Europe, Middle East and Africa (BSEMEA), headquartered in Brussels, Belgium, operate collectively as a "Bridgestone West" strategic region. This region services the strategic business needs of teams across the Americas, Europe, Middle East and Africa. BSAM and BSEMEA are subsidiaries of Bridgestone Corporation, globally headquartered in Japan. Bridgestone and its subsidiaries develop, manufacture and market a wide range of Bridgestone, Firestone and associate brand products and solutions to address the needs of a broad range of customers and industries.

Job Category

Information Technology

Position Summary

The Executive Director, Deputy Chief Information Security Officer (Deputy CISO) is a senior cybersecurity leader responsible for partnering with the CISO to define, operationalize, and scale the enterprise cybersecurity program across corporate, manufacturing, and retail environments.

This role bridges strategy and execution, providing direct oversight of security operations, engineering, governance, and plant security. The Deputy CISO ensures the protection of critical information assets and operational technology (OT) systems while enabling business performance, manufacturing uptime, and digital transformation.

The Deputy CISO serves as a key advisor to executive leadership and acts on behalf of the CISO when required.

Responsibilities

Security Strategy & Leadership:

• Partner with the CISO to define and execute the enterprise cybersecurity strategy and roadmap in corporate, manufacturing, and retail environments.

• Translate strategic objectives into actionable security initiatives across the organization.

• Lead and mentor security leaders and teams, including Engineering, Identity & Access Management, Governance, Risk & Compliance (GRC), Threat Detection & Response, Plant Security, and Operations.

• Partner with CISO to maintain external benchmarking and partnerships to stay abreast of security challenges, new technology, and the ever-changing cybersecurity landscape

• Act as the CISO's delegate in executive discussions, global committees, and cross-functional initiatives.

Security Operations & Incident Response:

Partner with Director(s) to:

• Oversee Security Operations Center (SOC), incident response, threat detection, and vulnerability management programs.

• Lead response to major cybersecurity incidents, especially those impacting manufacturing operations, ensuring rapid containment and recovery.

• Drive continuous improvement in detection, automation, and response capabilities across enterprise, retail, and plant environments.

Risk Management, Governance & Compliance:

Partner with Director(s) to:

• Manage enterprise cybersecurity risk program, including risk assessments, mitigation strategies, and reporting.

• Ensure compliance with relevant regulations, frameworks, and standards (e.g., NIST, NIS2, CMMC, ISO 27001, CIS, HIPAA, PCI-DSS as applicable).

• Collaborate with audit, legal, and compliance teams to ensure regulatory readiness and remediation.

• Establish security policies, standards, and procedures.

• Track key performance indicators (KPIs), key risk indicators (KRIs), and maturity metrics.

• Manage budgets, vendor relationships, and strategic partnerships.

• Drive security awareness, training, and culture across the enterprise.

Security Architecture, Engineering, Plant Security, and IAM:

Partner with Director(s) to:

• Provide oversight for secure system architecture and design across cloud, on-prem, and hybrid environments for both IT and OT.

• Ensure integration of security controls into IT and business systems.

• Promote Zero Trust principles and secure-by-design practices.

• Drive improvements in Plant Security and other priority areas.

• Drive strategic direction and design of modern identity.

• Drive identification and implementation of AI Security Guardrails and operational security measures.

Business Engagement & Culture:

• Act as a trusted advisor to executives, plant leadership, and business stakeholders on cybersecurity risk and mitigation.

• Collaborate across IT, engineering, manufacturing, and corporate teams to embed security into operations.

• Drive a culture of security awareness and accountability across the enterprise workforce.

• Lead, mentor, and develop high-performing cybersecurity teams.

Minimum Qualifications

Education:

• Bachelor's degree in Information Security, Computer Science, Engineering, or related field (Master's preferred).

Experience:

• 10-15+ years of experience in information security, IT risk, or cybersecurity leadership roles.

• Proven experience managing large-scale security programs and teams.

• Experience in manufacturing industry is required.

• In addition to the manufacturing industry, experience in a highly regulated industry (e.g., healthcare, finance, government) is preferred.

• Demonstrated ability to operate at both strategic and tactical levels.

• Technical understanding and experience is required (e.g., engineering, Incident Response, architecture, AI)

Certifications (Preferred):

• CISSP (Certified Information Systems Security Professional)

• CISM (Certified Information Security Manager)

• CRISC, CISA, or equivalent

• Cloud security certifications (e.g., CCSP, AWS Security Specialty) are a plus

Core Competencies:

• Strong leadership and executive communication skills

• Deep understanding of cybersecurity frameworks and modern threat landscape

• Expertise in risk management and regulatory compliance

• Operational excellence in incident response and security operations

• Strategic thinking with hands-on execution capability

• Ability to influence technical and non-technical stakeholders

Key Relationships:

• Reports to: Vice President, Chief Information Security Officer (CISO)

• Works closely with: HR, Physical Security, Internal Audit, Risk, Legal, Compliance, Engineering, Business Unit Leaders, and others

• External: Vendors, auditors, regulators, and industry partners

Success Metrics:

• Reduction in enterprise risk exposure

• Security incident response time and effectiveness

• Compliance audit outcomes

• Security program maturity improvements

• Development of internal Teammates

• Business alignment and stakeholder satisfaction

At Bridgestone, you are Free to Be

We believe people can only provide superior service and quality to others when they bring their whole self to work. We believe in championing all perspectives, individuals and teams because we understand the importance of seeing the world and our business through many different lenses. We are building a team as diverse as the world we serve. So, show us what you are made of, because who you are is what we need.

What we offer

At Bridgestone, what really matters is to foster co-creation opportunities and empowering you to be creative and curious to make mobility safer, more efficient, and more sustainable for future generations. Whatever role you fill, when you represent Bridgestone, you are a valued teammate, and part of our larger mission to "Serve Society with Superior Quality", for that, we offer you more than just a competitive compensation; we will provide you:

• A supportive and engaging onboarding experience to ensure a smooth transition into our team.

• The opportunity to develop and grow, through training and regular mentorship.

• Corporate Social Responsibility activities.

• A truly global, dynamic and challenging work environment.

• Agility and work/life effectiveness and your long-term well-being.

• A diverse and inclusive team.

Bridgestone is proud to be an Equal Employment Opportunity employer. It is our policy to consider for employment all individuals regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, gender, sex, sexual orientation, gender identity and/or expression, genetic information, veteran status, or any other characteristic protected by federal, state or local law.

Employment Eligibility

If hired, a Form I-9 Employment Eligibility Verification must be completed at the start of employment. Temporary work authorization or the need for sponsorship may disqualify you from employment.