Global Cybersecurity & Compliance Director

Davis-Standard; Chicago (IL); On-site; USD 150,000 - 210,000; Full time

Job summary

Davis-Standard is seeking a seasoned cybersecurity leader to own the enterprise security program and governance framework. You will drive risk-based decisions, manage budgets, and report to executives while partnering with Infrastructure, Legal, Compliance, and manufacturing leadership.

The role covers incident readiness, vulnerability management, and secure-by-design initiatives across global sites. Preference for candidates able to operate onsite near Chicago and guide a growing security

Qualifications

• 10+ years of progressive experience in cybersecurity, information security, IT risk, security operations, or related technology leadership.
• Experience leading or influencing cybersecurity programs across security operations, incident response, vulnerability management, identity/access security, governance, risk, and compliance.
• Experience managing internal teams, external partners, managed security providers, or cross-functional security initiatives.
• Practical knowledge of frameworks such as NIST CSF, Zero Trust, ISO 27001, CIS Controls, incident response, third-party risk management, and vulnerability management.
• Strong working knowledge of Microsoft security ecosystems, identity platforms, endpoint security, SIEM/SOC concepts, EDR/XDR, MFA, privileged access, cloud/SaaS security, and network security fundamentals.
• Ability to build executive-level cybersecurity reporting, risk registers, metrics, remediation plans, and governance routines.
• Strong communication skills to explain cybersecurity risk to nontechnical stakeholders and executives.
• Onsite work in the Chicago area near O’Hare with occasional flexibility.

Responsibilities

• Establish and lead the enterprise cybersecurity and compliance program across global units and manufacturing sites.
• Develop and maintain a cybersecurity strategy, operating model, governance cadence, policy roadmap, risk register, and executive reporting framework.
• Align the program with frameworks like NIST CSF and Zero Trust, defining roles, escalation paths, and decision rights.
• Build and lead the Security and Compliance team, coaching analysts and coordinating SIEM/SOC services.
• Select, implement, and improve the company’s SIEM/SOC managed service with defined SLAs and reporting.
• Own the incident response program, playbooks, tabletop exercises, and post-incident reviews.
• Lead disaster recovery planning for Tier 1 systems and ensure cybersecurity is embedded in business continuity planning.
• Communicate security risk in business terms to executives and cross-functional teams.

Skills

Cybersecurity leadership

Executive reporting

Risk-based decision making

Stakeholder communication

Security governance

Team building

Budget ownership

Incident readiness

Education

Bachelor’s degree in a relevant discipline

Tools

CrowdStrike

Microsoft 365

Microsoft Entra ID

Active Directory

Duo MFA

Intune

SIEM/SOC providers

Zscaler

Job description

Davis-Standard is seeking a seasoned cybersecurity leader to own the enterprise security program and governance framework. You will drive risk-based decisions, manage budgets, and report to executives while partnering with Infrastructure, Legal, Compliance, and manufacturing leadership.

The role covers incident readiness, vulnerability management, and secure-by-design initiatives across global sites. Preference for candidates able to operate onsite near Chicago and guide a growing security