Director of Cybersecurity

About the Job

About Company For the past 80+ years, M&D has led the aftermarket in remanufacturing innovation to address technological advancements and changing customer needs. In the past few decades, we have expanded beyond our remanufacturing roots to develop close (and sometimes exclusive) partnerships with the world’s leading OEMs and manufacturers.

Those partnerships with key suppliers like Bosch, Garrett, Federal Mogul, Cummins, Stanadyne, Holset, BorgWarner, Delphi, Yanmar, Mitsubishi, Denso and others have been critical in honing our remanufacturing capabilities and expanding our parts offering to include new, no core options in fuel injectors and fuel pumps, diesel engine cylinder heads, blocks, crankshafts and connecting rods. M&D also stocks a complete assortment of turbos (new and remanufactured), inframe overhaul kits, filtration and aftertreatment parts including DPFs, DOCs, EGRs, sensors and other engine parts.

Our strong remanufacturing roots combined with our 41 branch locations, a nationwide outside sales team of 25 and our close OEM & Manufacturer partnerships make us unique in the industry – no one understands diesel engine failure analysis and parts better than M&D. WE FUEL UPTIME.

About the Role

The Director of Cybersecurity leads the development and execution of enterprise cybersecurity strategies designed to protect the organization’s digital assets, manufacturing systems, infrastructure, and intellectual property. This role is responsible for identifying and mitigating cyber risks, overseeing incident response and continuous monitoring programs, ensuring compliance with regulatory and industry standards, and embedding security best practices across IT and manufacturing operations. Working closely with executive leadership and cross-functional teams, the Director applies strong technical, analytical, and leadership capabilities to strengthen the organization’s security posture, support operational resilience, and proactively adapt cybersecurity strategies in response to evolving threats and technologies.

Qualifications

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• At least 8 years of progressive experience in cybersecurity roles, including leadership positions.
• Proven experience managing cybersecurity programs within manufacturing or industrial environments.
• Strong knowledge of cybersecurity frameworks such as NIST, ISO 27001, and industry-specific standards.
• Experience with risk management, incident response, and regulatory compliance in cybersecurity.

Preferred Qualifications

• Master’s degree in Cybersecurity, Information Security, or Business Administration.
• Professional certifications such as CISSP, CISM, or CISA.
• Experience with operational technology (OT) security and industrial control systems (ICS).
• Familiarity with emerging cybersecurity technologies and threat intelligence platforms.
• Demonstrated success in leading cross-functional teams and driving organizational change.

Responsibilities

• Develop and implement a robust cybersecurity strategy aligned with the organization's manufacturing operations and business goals.
• Lead and manage the cybersecurity team, providing guidance, training, and performance evaluations to ensure high effectiveness.
• Conduct regular risk assessments and vulnerability analyses to identify potential security gaps and implement appropriate controls.
• Oversee incident response and recovery efforts, coordinating with internal teams and external partners to minimize impact.
• Ensure compliance with relevant cybersecurity regulations, standards, and best practices specific to the manufacturing industry.
• Collaborate with IT and operational technology (OT) teams to secure network infrastructure, industrial control systems, and connected devices.
• Manage cybersecurity budgets, vendor relationships, and technology investments to optimize security posture.
• Report regularly to senior leadership and the board on cybersecurity risks, incidents, and mitigation strategies.