Manager Regional Information Security Officer

Manager -Regional Information Security Officer NAFTA Mercedes-Benz Group AG Fort Worth, TX Arbeitszeit:Vollzeit Aufgaben About Us: Who is Mercedes-Benz Financial Services? Mercedes-Benz Financial Services, part of the global company Mercedes-Benz Mobility AG is the captive financing and mobility solutions company of the global luxury automobile manufacturer, Mercedes-Benz AG. We offer a comprehensive range of automotive financial and insurance products that make it easy for our customers to drive their dream Mercedes-Benz vehicle. Why work at Mercedes-Benz Financial Services? Working at Mercedes-Benz Financial Services is more than a job to it’s an opportunity to join an innovative team where you are valued for your contributions. As an employee, you will experience career development in a positive, employee-centric environment. We’re a global company that not only offers best-in-class products to our customers but also best-in-class benefits to our employees. Our employees experience a comfortable, friendly environment and relaxed, inclusive culture. Benefits When working at Mercedes-Benz Financial Services, you will enjoy a comprehensive and amenity-rich benefits package offering something for every employee at each stage of their life. As a new employee, you will have the opportunity to take advantage of the following benefits that go beyond to beginning day one: Get Rewarded! Competitive salary plus an annual bonus based on company performance and/or personal yearly performance Need a vacation? How about just some time for YOU! In addition to our vacation time, you’ll receive fifteen (15) additional corporate holidays, which will allow you to celebrate religious holidays or escape to the spa! Designed to be flexible, we let you decide which days are most important to you! Ride in Style - All employees are eligible to participate in the Mercedes-Benz Employee Lease Program We want you to be healthy! Outstanding medical, dental, and vision insurance, employer-paid short and long term disability plus on-site exercise facilities Is your family growing? Enjoy generous paid Family Leave Programs - Six Weeks for New Parents; Adoption Expense Reimbursement Programs - up to 6k per child Want to go back to school? Tuition Assistance Scholar Program - receive up to 8k in vouchers to complete business-related coursework 6k for undergraduate 8k for graduate Job Overview: Assure fulfillment of the Regional Information Security Officer (RISO) line function and lead the Information Security Team within the Mercedes Benz Financial Services Americas organization. The ISO works closely with the global Cybersecurity team and supports business units or areas in identifying and mitigating information security risks and contributes to corporate information security initiatives. The ISO is accountable for the implementation and continuous improvement of information security within the respective business unit or area. Additionally, the role is responsible for securing and governing cloud and AI platforms , ensuring resilient architecture, compliant data usage, and trusted deployment of AI capabilities across the organization. In addition, the ISO provides strategic direction for cybersecurity initiatives, ensuring they align with Mercedes?Benz’s global security standards, regulatory frameworks such as A22.1 and Regulations for Information Security (RISE 2.0), and the organization’s overall risk appetite. The ISO acts as a trusted advisor to senior leadership, offering insights on emerging threats, security?related business impacts, and required investments to maintain resilience. The role also plays a key part in fostering a culture of security awareness across all business units. This includes partnering closely with BISOs, ISAs, IT, Compliance, Legal, and broader corporate security functions to embed secure?by?design practices into systems, processes, and projects. By enabling transparency, continuity, and cross?functional collaboration, the ISO ensures Mercedes?Benz operations remain secure, compliant, and prepared for evolving cyber risks. Responsibilities: Strategic Cybersecurity Leadership Develop and lead the enterprise?wide cybersecurity strategy aligned with business objectives and evolving threat landscapes. Drive continuous improvement of cybersecurity maturity by assessing posture, identifying gaps, and leading remediation initiatives. Advise senior leadership on cyber risks, emerging threats, regulatory impacts, and required investments. Governance, Policy and Compliance Management Define, maintain, and enforce cybersecurity policies, standards, procedures, and architectural principles. Ensure compliance with A22, Regulations for Information Security (RISE), ISO/IEC 27000, GDPR, CCPA, and other applicable regulations. Oversee risk management programs, including risk identification, assessment, prioritization, and mitigation. Govern the secure and ethical adoption of AI and emerging technologies across the enterprise. Manage exceptions, deviations, and escalations related to non?compliance with security or privacy requirements. Cybersecurity Program Oversight Manage the implementation and continuous improvement of the enterprise information?security program. Evaluate organizational security maturity and deliver structured improvement plans. Embed a security?first culture through awareness, education, and shift?left practices. Integrate Security?by?Design and DevSecOps principles across the SDLC for secure code development. Operational Security and Incident Response Identify, track, and remediate vulnerabilities, audit findings, and operational security gaps. Ensure alignment with RISE requirements and contribute feedback for global improvements. Support incident?response activities including triage, containment, remediation, and lessons learned. Conduct Cyber Security Assessments and support internal/external audits. Collaboration with Global, Regional and Local Security Stakeholders Collaborate with Global Cyber Security (GCS) to ensure alignment with global security strategies and frameworks. Partner with Local Compliance and the DPO/LCO to integrate data?protection requirements into cybersecurity practices. Work with Business Information Security Officers (BISOs) to align security controls with business needs and risk profiles. Maintain strong communication channels across security governance bodies, ensuring transparent, consistent reporting. Contribute to global awareness programs, ISO forums, and multi?stakeholder security initiatives. Data Protection, Privacy and Information Governance Establish and enforce data?privacy controls and secure?handling requirements aligned with regulatory and industry standards. Implement data classification, protection, and lifecycle governance to safeguard sensitive information. Support privacy?by?design and secure data?provisioning practices (e.g., masking, minimization). Third?Party and Supply?Chain Risk Management Lead the vendor risk?management program, evaluating and monitoring third?party cybersecurity posture. Ensure supplier compliance with contractual, security, and regulatory expectations. Monitoring, Metrics and Reporting Monitor IT infrastructure, cloud, and applications for security threats, anomalies, and vulnerabilities. Define and track KPIs and KRIs to measure program effectiveness. Deliver regular executive?level reporting on risks, incidents, compliance, and security posture. Business Continuity and Disaster Recovery (BC/DR) Oversee development, testing, and enhancement of BC/DR capabilities. Support crisis?management processes and ensure resilience against cyber incidents, outages, and operational disruptions. Security Awareness and Culture Building Drive enterprise?wide security?awareness programs and targeted training initiatives. Promote a culture of shared responsibility and proactive risk mitigation across all teams. AI and Emerging Technology Cybersecurity Implement AI?specific cybersecurity controls, ensuring safe, ethical, and compliant adoption of AI systems. Develop governance frameworks for AI risk management, including model?security reviews, monitoring, and red?teaming of AI systems. Identify and mitigate risks associated with AI misuse, prompt injection, model poisoning, data leakage, and adversarial attacks. Guide cross?functional teams on secure integration of AI/ML pipelines, including data governance, training?data protections, and secure deployment. Evaluate security implications of emerging technologies (AI, IoT, blockchain, edge computing, autonomous systems) and ensure secure adoption. Cloud Security and Secure Cloud Architecture Oversee cloud?security controls across multi?cloud environments, ensuring alignment with enterprise standards and Zero?Trust principles. Ensure secure cloud architecture, including IAM, encryption, network segmentation, and workload protection. Collaborate with platform, DevOps, and application teams to embed security?by?design into cloud deployments and migrations. Manage cloud risks through continuous monitoring, configuration governance, and regular security assessments. Ensure SaaS, PaaS, and IaaS services follow the shared?responsibility model and meet security and compliance requirements. Leadership and Communication Inspire, motivate, and guide diverse technical and non?technical teams while fostering strong cross?functional collaboration. Lead day?to?day team operations, providing coaching, guidance, and support to ensure high performance and professional growth. Cultivate a team culture centered on innovation, knowledge sharing, accountability, and operational excellence. Ensure the team has the necessary skills, capabilities, and talent to deliver on cybersecurity and business objectives. Provide clarity and direction in ambiguous or complex situations, enabling teams to execute with confidence. Drive team performance with a focus on speed, agility, stability, and continuous improvement. Offer constructive feedback and empower team members to take ownership of their responsibilities and outcomes. Qualifikationen Qualifications: Applicants must be legally authorized to work in the U.S. at the time of application. Relocation assistance will not be provided for this position. This position requires a minimum of 5 years of overall work experience. Preferred experience includes: Strong background in cybersecurity including large-scale IT product rollouts Experience with Networking, Cloud-based applications, Server hardening/security baseline standards, patch management, and remediations. Education: High School Diploma/(GED) is required, Bachelor's Degree is preferred. Recommended majors include: Computer/Information Science or Information Technology Certifications The ideal candidate must have CISSP (Certified Information Systems Security Professional). CCSP (Certified Cloud Security Professional) or AZ500 Azure Security Engineer are highly recommended. Additional Knowledge: Knowledge of IT guidelines and corporate IT policies, IT standards, knowledge of IT organization (e.g., for escalation paths for non-standard requests) Ability to assess risk and implement effective security controls during and after the development process. Deep understanding of IT application architecture, integration, and lifecycle management. Understanding of Zero Trust Architecture (ZTA), AI security governance, and cloud security frameworks Skills: Proficiency in DevOps tools and practices, coupled with deep knowledge in cybersecurity. Strong communication skills to translate complex technical concepts into business terms. Strong proficiency with common management frameworks, regulatory requirements, and industry-leading practices Additional Skills: Excellent leadership and communication skills to drive security initiatives and foster collaboration Proven leadership in cross-functional environments, including mentoring and team development Contribute to overall strategy development related to IT security and IT more broadly and the business Posting Statement If you were not re-directed successfully after clicking the “Apply for this job” button, please click the following link to search and apply for the role on the local career portal: Mercedes-Benz Financial Services offers competitive salary, performance-based bonuses and a full suite of benefits including 401(K) with match, generous vacation and personal time, a Mercedes-Benz car program as well as flexible work arrangements. EEO/Minorities/Females/Disabled/Vets (remove if posted externally) Benefits Mitarbeiter Events Mitarbeiterrabatte möglich Mitarbeiterhandy möglich Mobilitätsangebote Betriebliche Altersversorgung Gesundheitsmaßnahmen Coaching Kantine, Café Parkplatz Barrierefreiheit Kontakt Mercedes-Benz Financial Services USA LLC 14372 Heritage Pkwy76177 Fort WorthDetails zum Standort Samantha De Klerk