Director of Security & Compliance

Job Description

Davis-Standard is a global leader in extrusion and converting technology, with equipment operating at customer facilities around the world.

\n

\n

We are seeking a Director of Security and Compliance to establish, lead, and mature the company’s global cybersecurity and compliance program.

\n

This is a strategic leadership role for a global manufacturing enterprise operating across North America, Europe, and Asia.

\n

The Director will build the security program, operationalize a managed SIEM/SOC service, strengthen cybersecurity governance, advance Zero Trust initiatives where appropriate, improve incident readiness, and lead compliance efforts including NIS2 readiness.

\n

\n

Key Responsibilities

\n

\n
• Lead and develop the global cybersecurity and compliance program across business units and manufacturing facilities, aligning strategy with NIST CSF, Zero Trust, and business risk priorities.

\n

• Build and manage the Security and Compliance team, including two Cybersecurity Analysts, while overseeing external SIEM/SOC managed services.

\n

• Oversee security operations, threat detection, incident response, vulnerability management, and remediation efforts across enterprise systems.

\n

• Lead cybersecurity incident response, disaster recovery readiness, business continuity planning, and security risk assessments.

\n

• Strengthen identity and access management, endpoint security, and Zero Trust initiatives across Microsoft Entra ID, Active Directory, MFA, Intune, CrowdStrike, and related technologies.

\n

• Establish risk-based vulnerability management processes, including assessments, penetration testing, remediation tracking, and executive reporting.

\n

• Drive regulatory compliance and governance initiatives, including NIS2 readiness, security policies, third-party risk management, and audit preparation.

\n

• Partner with IT, Infrastructure, Applications, and global manufacturing teams to integrate security into technology projects, acquisitions, and operational processes.

\n

• Communicate cybersecurity risks, program performance, and strategic recommendations to executive leadership and key stakeholders.

\n

\n

\n

Qualifications

\n

\n
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.

\n

• 10+ years of progressive experience in cybersecurity, information security, IT risk, compliance, or related technology leadership.

\n

• Proven experience leading cybersecurity programs encompassing security operations, incident response, vulnerability management, identity/access security, and governance.

\n

• Strong knowledge of cybersecurity frameworks and standards, including NIST CSF, Zero Trust, ISO 27001, CIS Controls, and NIS2.

\n

• Hands-on technical understanding of Microsoft 365, Entra ID, Active Directory, CrowdStrike, Intune, SIEM/SOC, EDR/XDR, MFA, and cloud/network security.

\n

• Experience working in global manufacturing, industrial, multi-site, or private-equity-backed environments.

\n

• Familiarity with OT/industrial cybersecurity, manufacturing systems, and global regulatory compliance.

\n

• Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSP, or GIAC are a plus.

\n

\n