Regional Information Security Officer

ZEISS Group

Regional Information Security Officer overseeing cybersecurity governance, risk, compliance, and incident response for ZEISS’s optics and optoelectronics operations. Remote role based in White Plains, New York.

Posted 9/10/2026full-timeRemote • New York • 🇺🇸 United StatesSeniorLead💰 $136,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in information security leadership, risk management, and compliance with regulatory standards such as CMMC and ISO 27001. Proven ability to design and implement security policies, manage security projects, and collaborate with cross-functional teams to enhance regional security posture.

Highest-signal resume keywords

Information Security LeadershipRisk Management MethodologiesCybersecurity Frameworks (NIST, ISO 27001)Regulatory Compliance (CMMC, HIPAA, TISAX)Project Management in Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security PoliciesSecurity Standards ImplementationIncident Response ManagementDigital Evidence GatheringSecurity Risk AssessmentSecurity Awareness InitiativesSecurity Concept ReviewCompliance AuditingSecurity Posture MonitoringM&A Security Integration

Soft Skills

Communication with StakeholdersLeadership in Security TeamsCollaboration with Cross-Functional TeamsTask PrioritizationProblem-Solving

Tools & Technologies

CIRT/SOC CollaborationEDiscovery ToolsSecurity Incident Management SystemsCompliance Management ToolsKPI Monitoring Tools

Certifications & Qualifications

CISSP

Industry Keywords

CybersecurityData ProtectionRegulated SectorManufacturingHealthcare

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Serve as an independent 2nd Line-of-defense representing Corporate Information Security in the region
Design and drive information security policies, standards, and processes
Review and interpret CSOPs, SSOPs, and other information-security documents and directives
Direct regional security teams in implementing and improving security standards and processes
Communicate and coordinate information security strategy, programs, and services with business stakeholders
Monitor and improve regional security posture and maturity
Advise on least privilege, need-to-know, security-by-design, and security-by-default principles
Ensure M&A projects and post-merger integrations comply with ZEISS security standards
Review security concepts for central business-supporting functions and regional demands
Address regional incident tickets and service requests
Participate in security risk management and aggregation of first-line risks
Support regional incident response and drive closure of gaps and vulnerabilities
Collaborate with CIRT/SOC, CIT, regional IT, local IT, and Business IT during security incidents
Serve as the primary escalation contact for regional information security topics
Participate in CIDA for regional security incidents
Conduct regional investigations, eDiscovery, and digital evidence gathering and analysis
Coordinate litigation holds with HR and Legal
Assess and approve regional information security requirements, with veto rights for critical risks
Evaluate project risks and define security requirements, including for M&A integrations
Guide local security assessments and conduct on-site compliance visits
Support regulatory certifications and compliance, including CMMC, ISO 27001, TISAX, HIPAA, CyberEssentials, and NIS2
Assess local regulatory requirements and advise on cybersecurity changes
Monitor regional information security status, KPIs, and KRIs
Identify business risks and mitigation strategies
Coordinate physical and facility security topics with Corporate Health & Safety
Support BISO review of information security contract amendments and security questionnaires
Recommend regional security awareness initiatives and support Corporate InfoSec programs

Requirements

What you’ll need

University degree in information security, information technology, engineering, cyber security, natural sciences, technology or similar
Minimum of 10 years of experience in information security, IT security, or a related field
Proven track record in a leadership role within information security, preferably in a regional or global capacity
Experience in a technology-driven industry, preferably manufacturing, healthcare, or another regulated sector
Knowledge of applicable international and regional regulatory requirements and standards in Cybersecurity and Data Protection
Hands-on experience with cybersecurity frameworks such as NIST and ISO 27001
Experience with risk management methodologies
Experience managing security projects from inception to completion
Ability to prioritize tasks and manage multiple projects simultaneously
Experience working with cross-functional teams and engaging with senior leadership
CISSP certification would be beneficial

Benefits

Comp & perks

Performance bonus or sales commissions
Medical plans
Vision
Dental
401k Matching
Employee Assistance Programs
Vacation and sick pay
Retirement savings plan
Paid time off