Chief Information Security Officer

Dover Corporation - Downers Grove, IL

Full-time - Senior

Downers Grove, IL

10,001+ employees

Machinery Manufacturing

About the position

The Chief Information Security Officer (CISO) at Dover is responsible for developing and implementing a comprehensive information security strategy to protect the organization's data and technology assets. This role involves leading a team of security professionals and collaborating with senior leadership to align security initiatives with business objectives, particularly in multi-cloud environments. The CISO will also oversee compliance with relevant regulations and standards, manage incident response, and ensure security awareness across the organization.

Responsibilities

• Develop and maintain the information security strategy, policies, standards, and procedures.
• Present Cyber and Connected Product Security Risks and progress to key stakeholders, including Dover's Board of Directors and Senior Executives.
• Create periodic and ad-hoc executive updates reporting key team achievements and progress against plan.
• Lead risk assessments and ensure compliance with relevant regulations and standards such as NIST CSF 2.0 and PCI DSS.
• Oversee incident response planning and execution, coordinating with legal and external security providers.
• Collaborate with IT and other departments to implement security solutions and best practices.
• Conduct security awareness training for employees in multiple languages.
• Stay current with industry trends and threats to enhance security posture.
• Manage relationships with internal auditors, external auditors, third-party vendors, and regulatory bodies.
• Design and implement a governance model for Cloud-hosted infrastructure and cloud-based technology services.
• Build and leverage KPIs to measure the effectiveness of the Dover Security model tied to NIST CSF.
• Manage Cyber and Product Security department financial metrics, team goals, and performance.

Requirements

• Minimum of B.S. or equivalent in Computer Science, Information Technology, or Information Security.
• 10+ years of working experience in Cyber Security, with a minimum of 4 years in a Senior Cyber Security role.
• Working knowledge of traditional security controls and technologies, including SIEM systems, IDS/IPS, IDAM systems, antivirus, and firewalls.
• Experience with newer security offerings such as EDR, threat intelligence platforms, and security automation.
• Background in global manufacturing or Industrial Services is a plus.
• CISSP, CISM, and/or SANS certification is a plus.

Nice-to-haves

• Experience in a hybrid work environment.
• Familiarity with multi-cloud architecture including Azure, OCI, and AWS.

Benefits

• Hybrid work arrangement.