Chief Information Security Officer (CISO)

Key Responsibilities:

• Own Global Security Strategy: Define and align the global cyber security strategy to business objectives and risk appetite, advising senior leadership and leading planning, budgeting, and vendor strategy.
• Operate the ISMS: Design, implement, and continuously improve the Information Security Management System compliant with ISO 27001, SOC2, and other frameworks, managing enterprise risk and third-party security.
• Lead Security Operations: Oversee global SecOps, mature CSIRT/CSOC capabilities, and act as executive incident commander for major cyber events, ensuring effective response and recovery.

Qualifications:

• Over 10 years in information security with 5+ years in senior leadership, and relevant certifications such as CISSP, CISM, or CISA.
• Proven track record leading large-scale enterprise security programs, managing global teams, and handling incident response and crisis management.
• Deep knowledge of modern security practices including cloud security, DevSecOps, IAM, and threat detection, with familiarity in NIST, ISO 27001, and PCI frameworks.

Company & Culture:

• JD Power empowers every auto-related decision through proprietary data, advanced analytics, and deep industry expertise, connecting insight to action.
• The company values innovation, collaboration, data-driven decisions, and trust, committed to a diverse workforce and global operations.