Chief Information Security Officer (CISO)

Avient - Avon Lake, OH

Full-time - Senior

Avon Lake, OH

5,001-10,000 employees

Chemical Manufacturing

About the position

The Chief Information Security Officer (CISO) is responsible for leading and directing the global information security strategy, policy, and program for the organization. This role involves safeguarding the company's information assets, managing risks, and ensuring compliance with relevant regulations across all regions in which the company operates. The CISO will collaborate closely with various stakeholders to enhance the existing security plan based on evolving business dynamics and oversee global security architecture, engineering, and operations.

Responsibilities

• Update and implement a global information security strategy that aligns with organizational objectives and regulatory requirements.
• Lead the development and implementation of global security architecture and engineering strategies.
• Direct global security operations to ensure effective monitoring, detection, response, and recovery from security incidents.
• Provide strategic oversight and management of the Governance, Risk, and Compliance (GRC) team.
• Formalize and mature the third-party risk management program.
• Manage compliance with NIS2 and other global regulatory requirements.
• Maintain, enforce, and update global information security policies, standards, and procedures.
• Lead the global incident response team in identifying, investigating, and responding to security breaches.
• Organize and lead the Executive Security Council to ensure alignment on security priorities.
• Oversee and enhance global security monitoring systems and develop security metrics for reporting.
• Foster a culture of security awareness through ongoing training programs.
• Collaborate with IT, legal, privacy, compliance, and business units to integrate security practices.
• Work closely with internal and external auditors to support audits and address findings.
• Develop and manage the global information security budget.
• Evaluate and manage relationships with global security vendors.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; a master's degree or relevant certifications (e.g., CISSP, CISM, CISA) is preferred.
• Minimum of 10 years of experience in information security, with at least 5 years in a leadership role.
• In-depth knowledge of information security principles, practices, and technologies.
• Proven ability to lead and manage a diverse, global team of security professionals.
• Demonstrated experience in overseeing and maturing a Governance, Risk, and Compliance (GRC) function.
• Experience managing compliance with NIS2, GDPR, CCPA, and other global regulatory requirements.
• Proven experience in developing and maturing a third-party risk management program.
• Excellent verbal and written communication skills.
• Strong analytical and critical thinking abilities.

Nice-to-haves

• Experience with security frameworks such as NIST and knowledge of their application in security programs.
• Strong decision-making, problem-solving, and project management skills.
• Experience organizing and leading cross-functional executive committees or councils.

Benefits

• Competitive salary and performance bonuses.
• Health, dental, and vision insurance.
• 401(k) retirement plan with company matching.
• Flexible work hours and remote work options.
• Professional development opportunities and tuition reimbursement.