Director Information Security

QLM Search; Pennsylvania; On-site; USD 170,000 - 210,000; Full time

Job summary

QLM Search partners with a global packaging manufacturer to appoint a Director, Information Security. The role spans strategy, risk, and hands-on security across global regions and business units.

The ideal candidate will lead Security Operations, Incident Response, GRC, Vulnerability Management and security architecture across cloud, apps, platforms and OT environments, while engaging senior stakeholders worldwide.

Qualifications

• Senior information security leadership within a complex, international organization.
• Strong foundations across security operations, infrastructure, networks, applications/platforms, and security architecture.
• Experience leading major incidents and investigations, with hands-on technical credibility.

Responsibilities

• Lead and strengthen capability across Security Operations, Incident Response and investigations.
• Advance GRC and Risk Assurance, ensuring risks, controls, remediation and residual exposure are managed.
• Lead Vulnerability Management, prioritising remediation against technical and business risk.
• Strengthen security across applications, platforms, infrastructure and cloud environments.
• Develop security policy, standards, procedures and incident playbooks.
• Continue developing manufacturing and OT security capabilities.
• Build global Training & Awareness programs with regional alignment.
• Partner with IT, Engineering, Operations and business leaders to translate cyber risk into decisions.

Skills

Security leadership

Security operations

Incident response

GRC / Risk Assurance

Vulnerability management

Executive communication

OT / Manufacturing security

Education

CISSP/CISM or equivalent

Job description

Global Cybersecurity | Multi-Region Manufacturing Organisation

Pennsylvania

QLM Search is partnering with a long-established global packaging manufacturer to appoint a Director, Information Security, helping shape and deliver the next phase of its global cybersecurity strategy.

Operating across multiple regions and business units within a lean global structure, this is a broad leadership mandate requiring someone who can move comfortably between strategy, technical detail, risk and senior business engagement.

Key Responsibilities:

• Lead and strengthen capability across Security Operations, Incident Response and investigations.
• Advance GRC and Risk Assurance, ensuring risks, controls, remediation and residual exposure are effectively managed.
• Lead Vulnerability Management, prioritising remediation against technical and business risk.
• Strengthen security across applications, platforms, infrastructure and cloud environments.
• Develop security policy, standards, procedures and incident playbooks.
• Continue developing manufacturing and Operational Technology security.
• Build global Training & Awareness, creating common standards while accommodating regional and business-unit requirements.
• Partner with senior leaders across IT, Engineering, Operations and the wider business to translate cyber risk into practical decisions.

Ideal Background:

• Senior Information Security/Cybersecurity leadership within a complex, international or multi-business organisation.
• Strong technical foundations across security operations, infrastructure, networks, applications/platforms and security architecture.
• Genuine recent experience leading major incidents and investigations, with the ability to remain close to technical detail.
• Broad experience across GRC/Risk Assurance, Vulnerability Management and control effectiveness.
• Able to combine hands‑on technical credibility with strong executive communication and stakeholder influence.
• Comfortable operating within a lean environment, personally stepping into detail where required while developing teams and capability.
• Manufacturing / OT experience valuable, alongside knowledge of NIST, ISO 27001 and cloud security. CISSP/CISM or equivalent desirable.

The Opportunity:

A highly visible role with the opportunity to influence and deliver a multi-year global Information Security roadmap, strengthening capability across a complex international manufacturing environment while remaining close to both the technology and the business.