Director of Security & Compliance

Davis-Standard is a global leader in extrusion and converting technology, with equipment operating at customer facilities around the world.

We are seeking a Director of Security and Compliance to establish, lead, and mature the company’s global cybersecurity and compliance program.

This is a strategic leadership role for a global manufacturing enterprise operating across North America, Europe, and Asia.

The Director will build the security program, operationalize a managed SIEM/SOC service, strengthen cybersecurity governance, advance Zero Trust initiatives where appropriate, improve incident readiness, and lead compliance efforts including NIS2 readiness.

Key Responsibilities

• Lead and develop the global cybersecurity and compliance program across business units and manufacturing facilities, aligning strategy with NIST CSF, Zero Trust, and business risk priorities.
• Build and manage the Security and Compliance team, including two Cybersecurity Analysts, while overseeing external SIEM/SOC managed services.
• Oversee security operations, threat detection, incident response, vulnerability management, and remediation efforts across enterprise systems.
• Lead cybersecurity incident response, disaster recovery readiness, business continuity planning, and security risk assessments.
• Strengthen identity and access management, endpoint security, and Zero Trust initiatives across Microsoft Entra ID, Active Directory, MFA, Intune, CrowdStrike, and related technologies.
• Establish risk-based vulnerability management processes, including assessments, penetration testing, remediation tracking, and executive reporting.
• Drive regulatory compliance and governance initiatives, including NIS2 readiness, security policies, third-party risk management, and audit preparation.
• Partner with IT, Infrastructure, Applications, and global manufacturing teams to integrate security into technology projects, acquisitions, and operational processes.
• Communicate cybersecurity risks, program performance, and strategic recommendations to executive leadership and key stakeholders.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 10+ years of progressive experience in cybersecurity, information security, IT risk, compliance, or related technology leadership.
• Proven experience leading cybersecurity programs encompassing security operations, incident response, vulnerability management, identity/access security, and governance.
• Strong knowledge of cybersecurity frameworks and standards, including NIST CSF, Zero Trust, ISO 27001, CIS Controls, and NIS2.
• Hands-on technical understanding of Microsoft 365, Entra ID, Active Directory, CrowdStrike, Intune, SIEM/SOC, EDR/XDR, MFA, and cloud/network security.
• Experience working in global manufacturing, industrial, multi-site, or private-equity-backed environments.
• Familiarity with OT/industrial cybersecurity, manufacturing systems, and global regulatory compliance.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSP, or GIAC are a plus.