Regional Information Security Officer
Core
Regional Information Security Officer acting as a 2nd line-of-defense function, overseeing security governance, policy implementation, and risk management across a specific ZEISS region.
Role type
Senior IC information security officer (regional governance)
Builds
Regional security posture, compliance with global standards, and incident response capabilities
Domain
Information Security / Cybersecurity / Regulatory Compliance
Required skills
Information security strategy, cyber-defense, IT infrastructure security, application security, physical security, incident response, risk management, security governance, policy development, regulatory compliance assessment, M&A security integration, security audit and assessment
Preferred skills
Thought leadership in security, business acumen, stakeholder management, knowledge of specific regulations (CMMC, ISO27001, TISAX, HIPAA, NIS2)
Technologies
Security frameworks (CMMC, ISO27001, TISAX, HIPAA, CyberEssentials, NIS2), eDiscovery tools, digital evidence analysis platforms
Responsibilities
Serve as independent 2nd Line-of-defense representing Corporate Information Security; Design and drive information security policies and standards; Direct regional 1st Line-of-defense teams to implement security standards; Monitor and improve regional security posture based on threat landscape; Consult on security principles (need-to-know, least privilege, security-by-design); Ensure M&A projects comply with security standards; Address regional incident tickets and support incident response; Conduct regional investigations and digital evidence gathering; Guide local security assessments and on-site compliance visits; Support regulatory certification maintenance; Assess local regulatory requirements; Monitor global/regional security status and KPIs.
Seniority
Senior, hands-on IC with strategic oversight
