Chief Information Security Officer

Security Executive Council; Durham, Northern (NC, KY); Hybrid; USD 180,000 - 320,000; Full time

Job summary

The Security Executive Council is seeking a Chief Information Security Officer (CISO) with a global vision to build and lead our cybersecurity and information assurance strategies. The CISO will play a pivotal, leadership role in driving innovative strategies for protecting our intellectual property, customer data, and digital assets from cyber threats.

This role requires deep knowledge of the semiconductor industry, strategic alignment of cybersecurity with our business model, and a proven

Qualifications

• Bachelor's or Master's degree in Information Security, Computer Science, or related field.
• Professional security management certification such as CISSP or CISM.
• 15+ years of experience in risk management, information security, and IT with at least 10 years in a senior leadership role.
• Experience with NIST (800-171) and ISO (27001) frameworks.
• Experience with CMMC for USGOV.
• Deep understanding of cybersecurity risks in the semiconductor industry and strategies to mitigate them.
• Knowledge of export controls and other regulatory requirements.
• Experience with contract and vendor negotiations and management including managed services.

Responsibilities

• Develop, implement, and monitor a global enterprise information security and IT risk management program.
• Lead the information security organization, including hiring, training, and mentoring a team.
• Identify, evaluate, and report information security risks to executives and the Board.
• Design protective measures for securing proprietary designs, patents, and sensitive information in the semiconductor sector.
• Work with business units to facilitate risk assessment and residual risk decisions.
• Align cybersecurity policies with enterprise policies and risk management framework.
• Manage information security budgets and cost-effective practices.
• Establish and oversee a cybersecurity incident management program including detection, response, and recovery.
• Coordinate with crisis management and incident response planning and testing.
• Liaise with external agencies to maintain a strong security posture.
• Conduct regular security audits and risk assessments and ensure regulatory compliance.
• Champion cybersecurity awareness and training globally.

Skills

Information security

Risk management

Leadership

Regulatory compliance

NIST 800-171

Education

Bachelor's or Master's in Information Security/CS

Job description

About the job

We are seeking a Chief Information Security Officer (CISO) with a global vision to build and lead our cybersecurity and information assurance strategies. The CISO will play a pivotal, leadership role in driving innovative strategies for protecting our intellectual property, customer data, and digital assets from cyber threats. The CISO needs to build a strong “security-first” culture across the organization to ensure that security is at the centre of all products and services.

This position requires a strong understanding of the semiconductor industry, strategic capabilities that can align our cybersecurity strategy and practices with our business model, objectives, and the risk universe we operate within globally.

The role requires a blend of innovative thinking to lead our company staying ahead of the ever-evolving threat landscape, along with strategic planning, technical expertise, and leadership – to ensure our information security posture is robust and resilient against evolving cyber risks. The ideal candidate will have a proven track record in developing and implementing comprehensive security programs in High Tech or Semiconductor manufacturing environments.

Key Responsibilities

• Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program at a global scale – to ensure the integrity, confidentiality, and availability of information owned, controlled, or processed by the organization, including secrets, patents, and proprietary designs
• Lead the enterprise's information security organization, including hiring, training, and mentoring a team of security professionals.
• Identify, evaluate, and report on information security risks timely, and in a manner that meets Executive Management and the Board’s expectations, meets the compliance and regulatory requirements, and aligns with and supports the risk posture of the enterprise.
• Design and implement protective measures for securing proprietary designs, patents, and other sensitive corporate information, considering the unique risks present in the semiconductor industry, given innovation and IP contributes materially to our company’s competitive advantage.
• Work directly with the business units to facilitate risk assessment and risk management processes, and work with stakeholders throughout the enterprise on identifying acceptable levels of residual risk.
• Ensure cybersecurity policies are in alignment with Enterprise business policies, IT policies and the global Enterprise Risk Management framework for Wolfspeed.
• Develop and manage information security budgets and adopt cost-effective expense strategies and practices – to reduce and mitigate identified risks.
• Establish and oversee the implementation of a cybersecurity incident management program that includes incident detection, response, mitigation, and recovery processes.
• Effectively align cybersecurity practices with overall crisis management and incident response strategies, test plans and tabletop exercises – to ensure business continuity for Wolfspeed in the event of a worst‑case disaster scenario, whether or not triggered by a security incident.
• Liaise with external agencies, such as law enforcement and other advisory bodies as necessary, to ensure that the organization maintains a strong security posture against external threats.
• Conduct regular security audits, risk assessments, support annual financial and IT audit objectives, and ensure compliance with industry standards and regulatory requirements specific to the semiconductor industry.
• Champion cybersecurity awareness and training programs globally, across all levels of the organization.

We know how to fine‑tune corporate security because we've led effective and efficient Fortune 500‑level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation.

Qualifications:

Ideal Qualifications

• Bachelor's or Master's degree in Information Security, Computer Science, or related field.
• Professional security management certification, such as a CISSP, CISM, or similar.
• 15+ years of experience in a combination of risk management, information security, and IT jobs, with at least 10 years in a senior leadership role.
• Experience with NIST (800‑171) and ISO (27001) frameworks
• Experience with CMMC (Cybersecurity Maturity Model Certification) for USGOV
• Deep understanding of the evolving cybersecurity threats facing the semiconductor industry and experience in crafting strategies to mitigate these risks.
• Knowledge of relevant legal and regulatory requirements, including export controls
• Experience with contract and vendor negotiations and management including managed services.
• Strong leadership skills and the ability to work effectively with business managers, IT engineering and IT operations staff, Wolfspeed’s vendors and suppliers.
• Excellent verbal and written communication skills, including the ability to explain technical concepts and technologies to business leaders, and business concepts to the IT workforce.

This role may require additional duties and/or assignments as designated by management.