Regional Information Security Officer
Core
Regional Information Security Officer acting as a 2nd line-of-defense function, overseeing security strategy implementation, governance, and risk management across a specific ZEISS region.
Role type
Senior IC Information Security Officer (Regional)
Builds
Regional security governance frameworks, risk mitigation strategies, and compliance posture for ZEISS business segments.
Domain
Information Security / Cybersecurity / Risk Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cyber-defense, IT infrastructure security, application security, physical security, incident response, security governance, risk-based security roadmap design, M&A security integration, regulatory compliance assessment, security audit leadership, security metrics development.
Preferred skills
Experience with CMMC, ISO27001, TISAX, HIPAA, NIS2 frameworks, eDiscovery, digital forensics, litigation support.
Technologies
CMMC, ISO27001, TISAX, HIPAA, CyberEssentials, NIS2, eDiscovery tools, CIRT/SOC platforms.
Responsibilities
Serve as independent 2nd Line-of-defense representing Corporate Information Security; Design and drive regional information security policies and standards; Direct regional teams to implement security operationalization; Monitor and improve regional security posture based on threat landscape; Ensure M&A projects comply with security standards; Support regional incident response and act as primary escalation contact; Conduct regional investigations and digital evidence gathering; Assess applicability of local regulatory requirements; Monitor global/regional security status and KPIs.
Seniority
Senior, hands-on IC with strategic advisory role