The Director, Information Security Regulatory Assurance is responsible for establishing and leading a sustainable enterprise capability to demonstrate compliance with applicable cybersecurity regulatory, statutory, and industry assurance requirements. 

This role provides strategic leadership and operational oversight for the organization's cybersecurity regulatory assurance portfolio, including NIS2, CCPA, U.S. Department of Justice data security requirements, China MLPS, SWIFT, and PCI, as well as emerging requirements that create cybersecurity audit, assessment, certification, attestation, or evidence obligations. 

The Director will translate regulatory requirements into practical assurance expectations, coordinate readiness and assessments across Information Security, technology teams, business organizations, affiliates, manufacturing sites, R&D locations, and provide leadership with clear visibility into readiness, risk, deficiencies, and remediation. 

Responsibilities 

• Strategy & Influence: Work with domain senior leadership and make contributions to develop strategy. Adapt and execute domain strategic plans. (Information Security Regulatory Assurance Strategy & Governance) 
• Cyber Regulatory Portfolio Leadership: Manage and communicate the assurance calendar and priorities. 
• Control & Evidence Assurance / Continuous Monitoring and Issues, Risk & Remediation 
• Liaison & Relationship Building: Build collaborative relationships and effectively interact frequently with business and/or technology senior leaders. Interactions focused on project and operational decisions. Interact well with diverse groups within function and maintain strong working relationships with internal and external collaborators. (Audit, Assessment & Attestation Management) 
• Decisions & Policies: Make key decisions that are guided by established strategies and priorities. Influence operating policies and procedures that affect the domain based on changes in the regulatory environment. Interpret enterprise-wide policies, processes and procedures that may affect teams and domain workflow. (Regulatory Change & Emerging Requirements) 
• Strategy & Influence: Work with domain senior leadership and make contributions to develop strategy. Adapt and execute domain strategic plans. (Executive Reporting & Stakeholder Management) 
• Process Improvement & Optimization: Drive opportunities to improve process and/or technology. (Assurance Transformation & Continuous Improvement)