Group Cybersecurity Director

Join BIC World, a community of brands dedicated to creating ingeniously simple and joyful products that have been part of hearts and homes for over 75 years. We are committed to growing our iconic and innovative brands by reimagining everyday essentials in new, sustainable, and responsible ways.

Our culture encourages a "roll up your sleeves and get the job done" mindset, ensuring self-starters, problem solvers, and innovative thinkers can truly thrive. At BIC World, you are empowered to take ownership of your career and use your unique perspective to make a meaningful, global impact on our mission.

We are seeking an experienced and strategic Global Cybersecurity Director to lead, mature, and continuously improve our global cybersecurity program across a multinational manufacturing environment.

Reporting directly to the Chief Information Officer (CIO), this leader will be responsible for defining and executing the company's cybersecurity strategy, protecting information assets, securing manufacturing operations, managing cyber risk, and driving the adoption of modern security technologies and best practices.

The successful candidate will have a proven track record of delivering measurable improvements in cybersecurity capabilities, leading high-performing teams, and implementing effective security controls in complex global organizations. Particular expertise in network segmentation, identity and access management (IAM), and enterprise security architecture is required.

This role will partner closely with business leaders, infrastructure, applications, manufacturing operations, legal, compliance, and external partners to ensure cybersecurity is integrated into all aspects of the organization.

Key Responsibilities

Cybersecurity Strategy & Leadership

• Develop and execute a comprehensive global cybersecurity strategy aligned with business objectives and risk appetite.
• Serve as the senior cybersecurity advisor to the CIO, CFO, and executive leadership team.
• Establish and maintain cybersecurity governance, policies, standards, and procedures.
• Drive a culture of cybersecurity awareness and accountability across the organization.
• Present cybersecurity posture, risks, incidents, and improvement programs to executive leadership.

Security Program Management

• Lead the continuous improvement of cybersecurity technologies, controls, and operational processes.
• Develop multi-year cybersecurity roadmaps and investment strategies.
• Establish security metrics and KPIs to measure program effectiveness.
• Ensure alignment with industry frameworks such as NIST CSF, ISO 27001, CIS Controls, and relevant regulatory requirements.

Identity & Access Management (IAM)

• Lead the strategy, implementation, and governance of identity security programs.
• Oversee authentication, authorization, privileged access management (PAM), and identity governance processes.
• Drive modernization initiatives including:
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Conditional Access
• Privileged Identity Management
• Zero Trust security principles

Network Security & Segmentation

• Lead the cybersecurity vision, requirements, standards, and risk management practices for network security and segmentation.

• Collaborate with technology and business stakeholders to develop and mature segmentation strategies across:

• Corporate networks
• Manufacturing facilities
• Distribution centers
• Cloud environments
• Partner with infrastructure and manufacturing operational technology (OT) teams to improve security boundaries and reduce attack surfaces.
• Establish and monitor security standards to ensure appropriate segmentation and risk-based separation between IT and OT environments.

Security Operations & Incident Response

• Oversee security monitoring, detection, incident response, and vulnerability management programs.
• Direct investigations into cybersecurity incidents and coordinate response activities.
• Ensure effective threat intelligence and threat-hunting capabilities.
• Lead post-incident reviews and remediation efforts.

Risk Management & Compliance

• Identify, assess, and manage cybersecurity risks across the enterprise.
• Lead cybersecurity audits, assessments, and compliance initiatives.
• Manage third-party cybersecurity risk programs.
• Support legal, privacy, and regulatory requirements applicable to global operations.
• Lead the cybersecurity strategy, governance, and risk management framework for Generative AI (GenAI) and AI-enabled technologies across the enterprise, providing expert guidance on the secure evaluation, adoption, and deployment of AI solutions. Establish and enforce AI security best practices, including data protection, identity and access controls, model governance, third-party AI risk assessments, prompt and data leakage prevention, regulatory compliance, and alignment with responsible AI principles to enable innovation while managing organizational risk.

Team Leadership

• Build, develop, and lead a high-performing cybersecurity organization.
• Provide coaching, mentoring, and career development for team members.
• Manage cybersecurity budgets, vendors, consultants, and strategic partners.
• Foster strong collaboration with global IT, business, and manufacturing teams.

Required Qualifications

Education

• Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or related field.
• Master's degree preferred.

Experience

• Minimum 10 years of progressive cybersecurity experience.
• Minimum 5 years leading cybersecurity teams and programs within medium to large global organizations.
• Demonstrated success improving cybersecurity technologies, processes, and organizational maturity.
• Experience operating within multinational organizations across multiple geographies.
• Experience supporting manufacturing, industrial, or operational technology (OT) environments strongly preferred.

Technical Expertise

Strong knowledge and hands-on leadership experience in:

• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Network Security Architecture
• Network Segmentation and Micro-Segmentation
• Zero Trust Security Models
• Security Operations and Incident Response
• Vulnerability Management
• Endpoint Security
• Cloud Security (Microsoft Azure and/or AWS)
• Security Monitoring and SIEM Platforms
• Cyber Risk Management
• Operational Technology (OT) Security
• GenAI security principles

Certifications Preferred

One or more of the following:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CRISC (Certified in Risk and Information Systems Control)
• CCSP (Certified Cloud Security Professional)
• GIAC certifications
• Microsoft Security certifications

Leadership Competencies

The ideal candidate will demonstrate:

• Strategic thinking and business acumen
• Strong executive presence and communication skills
• Ability to influence across organizational boundaries
• Proven experience leading global teams
• Strong analytical and problem-solving skills
• Ability to drive change and continuous improvement
• Crisis management and decision-making capabilities
• Collaborative leadership style with a focus on accountability and results

BIC World is an Equal Opportunity Employer. We strongly commit to hiring people with different backgrounds and experiences to help us build better products, make better decisions, and better serve our customers. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, veteran status, disability status, or similar characteristics. All employment is decided based on qualifications, merit, and business need.

BIC World is not seeking assistance or accepting unsolicited resumes from search firms for this employment opportunity. Regardless of past practice, all resumes submitted by search firms to any team member at BIC via email, or directly to a BIC team member in any form without a valid written search agreement in place for that position will be deemed the sole property of BIC, and no fee will be paid in the event the candidate is hired by BIC as a result of the referral or through other means.