Director, Information Security

Crowncork; Pennsylvania; On-site; USD 150,000 - 210,000; Full time

Job summary

Crown Holdings, Inc. in Yardley, PA is seeking a Director of Information Security to lead Crown’s global cybersecurity program.

The role reports to the CISO and drives end-to-end security operations, governance, risk and compliance, and security awareness across multiple domains. You will build roadmaps, manage budgets and vendors, collaborate with IT, legal and business partners, and translate strategy into measurable outcomes.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related field or equivalent practical experience.
• 10+ years of progressive experience in cybersecurity, information security, technology risk, or related leadership roles.
• Leadership across multiple cybersecurity domains such as security operations, security engineering, vulnerability management, compliance, governance, or incident response.
• Experience managing cybersecurity programs, teams, vendors, budgets, and delivery roadmaps in a complex enterprise environment.
• Working knowledge of security frameworks and practices such as NIST, ISO 27001, CIS Controls, incident response, vulnerability management, identity security, cloud security, and audit support.
• Effective communication skills with the ability to present operational issues, program status, and recommendations clearly to technical and nontechnical stakeholders.

Responsibilities

• Lead Security Operation Center (SOC), Governance, Risk and Compliance (GRC), Training and Awareness, and Vulnerability Management (VM).
• Oversee and mature Crown's global cybersecurity program across multiple domains.
• Partner with IT, legal, and stakeholders to strengthen detection, response, and security engineering practices.

Skills

Security leadership

Cybersecurity governance

Stakeholder communication

Vendor management

Education

Bachelor's degree in Cybersecurity or related field

Tools

NIST

ISO 27001

CIS Controls

Job description

## Director, Information SecurityApplylocations: PA - Yardleytime type: Full timeposted on: Posted Todayjob requisition id: JR102955## **About Crown**Crown Holdings, Inc. through it's subsidiaries, is a world leader in the metal packaging production process. We design and manufacture a wide range of innovative and sustainable metal packaging solutions and products. Our clients are some of the largest and most respected companies in the world.Crown is dedicated to building a team of highly talented, dedicated, and driven individuals. It's an exciting time to join our business because Crown offers you the opportunity to grow and develop your skills in an expanding industry.Crown was founded with the goal of valuing and promoting sustainability and this vision continues to be essential to our long-term future.**Job Description:****Information Security Director****Role Overview**Crown Holdings, Inc. is a global leader in packaging solutions, operating across more than 40 countries with over 23,000 employees. Sustaining this leadership position requires a strong, integrated cybersecurity capability that protects operations, enables business growth, and effectively manages evolving cyber risk.The Information Security Director is a senior leadership role responsible for executing and operationalizing Crown’s global cybersecurity program across multiple domains. The Director provides end-to-end ownership of cybersecurity program execution.The Director of Information Security leads execution of Crown’s cybersecurity program across several key functional areas of Crown’s Global Information Security Team. Functional areas include, but not limited to: Security Operations, Operational Technology (OT), Vulnerability Mgmt., Governance, Risk, and Compliance, along with Security Training and Awareness. Reporting to the CISO, this role is responsible for maturing and managing cybersecurity capabilities and processes that protect Crown revenue and employees. The leader translates enterprise security strategy into practical roadmaps, operating processes, and measurable outcomes. The role partners closely with IT, legal, and key stakeholders strengthen detection and response capabilities, improve security engineering practices, support regulatory and policy requirements, assist in the disciplined management of cybersecurity resources and investments, and provide direction and oversee Crown’s security training and awareness program.This role focuses on cybersecurity program leadership, operational execution, control effectiveness, and continuous improvement while supporting enterprise priorities, governance practices, and Crown’s broader security objectives.This leader will serve as a key thought partner to the CISO and an extension of the function’s leadership, providing day-to-day support across critical regional verticals.Over time, this role offers significant opportunity to broaden enterprise impact and assume increasing leadership responsibility.The role’s remit is Global, and responsibilities include the following areas:**Security Operation Center (SOC)****Governance Risk and Compliance (GRC)****Training and Awareness****Vulnerability Management (VM)**In the future a fifth area will extend to **Operational Technology** to oversee plant operations and evaluate synergies and bridge gaps to offset concerns with silo culture.Required Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related field, or equivalent practical experience 10 or more years of progressive experience in cybersecurity, information security, technology risk, or related technology leadership roles Demonstrated leadership across multiple cybersecurity domains such as security operations, security engineering, vulnerability management, compliance, governance, or incident response Experience managing cybersecurity programs, teams, vendors, budgets, and delivery roadmaps in a complex enterprise environment Working knowledge of security frameworks and practices such as NIST, ISO 27001, CIS Controls, incident response, vulnerability management, identity security, cloud security, and audit support Effective communication skills with the ability to present operational issues, program status, and recommendations clearly to technical and nontechnical stakeholdersAdditional Job ConsiderationsThis role requires collaboration, teamwork, and face-to-face interaction with colleagues, leaders, and/or clients.Being in the office ensures access to leaders, cross-functional partners, and resources necessary to make timely decisions and drive results.## **What Crown Offers You*** Strong engagement and commitment to the safety of our employees* The opportunity to build a meaningful career* Professional and personal development through training and work experiences