Job DescriptionAllied Universal® is hiring a Senior Director, North America Information Security.The Senior Director, North America Information Security leads Allied Universal's information security program across North America, serving as the senior most information security leader, reporting directly to the Global Chief Information Security Officer (GCISO).
This leader implements global security strategy protecting Allied Universal's people, systems, data, and operations while meeting business, customer, government-contracting, and regulatory requirements. In partnership with the North America CIO and key functions, the Senior Director leads regional information security within the governance and direction set by the GCISO.
This strategic, hands-on leader translates technical risk into business terms, guides teams through complex incidents, and builds a culture of security ownership and accountability.
This role will be based out of our Corporate Headquarters in Irvine, CA and can expect to travel within North America and internationally as business needs require.
RESPONSIBILITIES:Regional Leadership and Strategy- Develop and execute a North America cybersecurity plan aligned with global priorities, regional business objectives, and applicable legal, regulatory, contractual, and customer requirements
- Serve as senior cybersecurity advisor to North America executive leadership and represent the region in global cybersecurity governance forums
- Lead, mentor, and develop the North America information security team; recommend regional investments and resource priorities to the GCISO based on risk and business impact
Governance and Risk Management- Implement and enforce global cybersecurity policies, standards, and controls across North America, adapting implementation methods to legitimate regional business and regulatory needs
- Maintain the North America risk register and lead recurring risk assessments; oversee remediation, escalation, risk acceptance, and closure, escalating risks beyond tolerance to the GCISO
- Monitor regional metrics, key risk indicators, and control performance; assess the cybersecurity implications of acquisitions, integrations, system implementations, and new customer engagements
Compliance, Audits, and Third-Party Risk- Support compliance with applicable cybersecurity laws, regulations, and customer obligations, including SEC cybersecurity rules, U.S. state privacy and breach-notification laws, Canadian requirements, and government-contracting obligations
- Support alignment to NIST CSF, NIST SP 800-171, CMMC, ISO 27001, and SOC 2; coordinate regional audits, assessments, certifications, and penetration tests, and drive timely, sustainable remediation of findings
- Lead the North America third-party cybersecurity risk program with Procurement, Legal, Technology, and business owners across vendor selection, contracting, onboarding, monitoring, and termination
Incident Response and Resilience- Serve as regional incident commander for significant cyber events, coordinating investigation, containment, remediation, and recovery with the GCISO and cross-functional stakeholders
- Escalate actual or suspected material incidents promptly; ensure evidence preservation and coordination with Legal on privilege, notification, and reporting obligations
- Maintain and test regional playbooks, tabletop exercises, and post-incident reviews; ensure business-continuity and disaster-recovery plans address ransomware, destructive attacks, and critical vendor outages
Security Operations and Technology- Partner with the North America CIO to embed security requirements into architecture, IT operations, infrastructure, application development, and project delivery
- Oversee regional design, architecture, deployment and effective use of approved cybersecurity technologies, and ensure regional assets are visible to global monitoring and vulnerability-management processes
- Oversee regional vulnerability prioritization, remediation, and exception management
Communication and Culture- Brief the GCISO and North America executive leadership on cybersecurity posture, key risks, incidents, and remediation progress, translating technical issues into business, financial, operational, legal, and reputational impact
- Support GCISO reporting to the CEO, Global General Counsel, and Board of Directors, and respond to customer, regulator, auditor, insurer, and lender inquiries
- Drive regional security awareness and training programs and a culture of cybersecurity accountability
QUALIFICATIONS (MUST HAVE):- Must possess one of the following:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
- Associate's degree in Computer Science, Information Technology, Cybersecurity, or a related field with a minimum of fourteen (14) years of experience in cybersecurity or information security
- High school diploma or equivalent with a minimum of seventeen (17) years of experience in cybersecurity or information security
- Minimum of twelve (12) years of progressive experience in cybersecurity or information security, technology risk, or a closely related discipline
- Minimum of five (5) years of senior management or leadership experience within an information security function or a significant cybersecurity program
- Experience operating within a global or highly distributed organization and implementing enterprise standards in a regional environment
- Demonstrated experience managing and coordinating responses to significant cybersecurity incidents
- Experience with government-contracting cybersecurity obligations or other highly regulated customer environments.
- Experience building, managing, mentoring, and developing high-performing cybersecurity teams
- Strong budget management and resource planning experience
- Proven ability to engage and communicate effectively with executive leadership on cybersecurity strategy and risk
- Strong written, oral, and interpersonal communication skills
- Strong knowledge of cybersecurity governance, risk management, security operations, vulnerability management, third-party risk, and regulatory compliance
- Expertise with risk-based frameworks and standards such as NIST CSF, NIST SP 800-171, CMMC, ISO 27001, and SOC 2
- Familiarity with North American cybersecurity and breach-notification requirements, including U.S. federal and state requirements and relevant Canadian requirements
- Proven ability to advise senior executives and communicate complex cybersecurity issues in clear business terms
- Demonstrated ability to work effectively with Legal, Technology, Operations, Procurement, Compliance, and business teams
- Ability to operate as a "player-coach," setting strategic direction while engaging directly in complex operational, investigative, and incident-response matters
- Sound judgment, integrity, discretion, and the ability to remain effective during high-pressure events
PREFERRED QUALIFICATIONS (NICE TO HAVE):- Recognized security certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or equivalent
- Master's degree in Computer Science, Information Technology, Cybersecurity, Business, Law, or a related field
- Experience with CMMC compliance programs
- Familiarity with government contracting cybersecurity requirements
- Experience supporting a public company or an organization preparing to become public
- Experience with mergers, acquisitions, integrations, or other significant business transformations
- Familiarity with cloud security, operational technology, product security, data protection, and modern software-development practices
- Experience engaging with regulators, government customers, prime contractors, auditors, insurers, and external incident-response specialists
COMPENSATION AND BENEFITS:- Base salary range: $125,000 to $175,000 (based on experience), 20% bonus
- Medical, dental, vision, basic life, AD&D, retirement plan and disability insurance
- Eight paid holidays annually, five sick days, and four personal days
- Vacation time offered at an accrual rate of 3.08 hours biweekly. Unused vacation is only paid out where required by law.
PPO 14417
LI-26
Requisition ID 
