Information Security Lead

Senneca Holdings Inc

KY

JOB DETAILS
SKILLS
Business Growth, Business Operations, Business Strategy, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Campaigns, Career Development, CompTIA Security+, Computer Science, Computer Security, Corrective Action, Cross-Functional, Data Analysis, Endpoint Security, Entrepreneurship, Event Management, Financial Regulations, ISO (International Organization for Standardization), Incident Response, Information Technology & Information Systems, Information Technology Software, Information/Data Security (InfoSec), Internet Security, Investment Capital, Leadership, Life Insurance, Lift/Move 20 Pounds, Maintain Compliance, Manufacturing, Metrics, Microsoft Product Family, Operational Support, Performance Management, Phishing, Policy Development, Presentation/Verbal Skills, Process Improvement, Profit & Loss, Project/Program Management, Protective Services, Resource Management, Risk, Risk Analysis, Risk Management, Security Analysis, Security Attacks, Security Auditing, Security Monitoring, Security Policy, Service Delivery, Software Engineering, Time Management, Trend Analysis, Tuition Fees, U.S. National Institute of Standards and Technology (NIST), Willing to Travel, Writing Skills
LOCATION
KY
POSTED
3 days ago

At Senneca, we embrace the entrepreneurial spirit of the innovators that created our brands from traffic doors, to cold storage doors to fiberglass doors and beyond. We are committed to exceeding our customers' expectations and to provide doors that offer safety and protection to our customers' most important assets…people, products, capital investments and processes."> Information Security Lead-Senneca Holdings-2 Locations Available

Information Security Lead

At Senneca, we embrace the entrepreneurial spirit of the innovators that created our brands from traffic doors, to cold storage doors to fiberglass doors and beyond. We are committed to exceeding our customers' expectations and to provide doors that offer safety and protection to our customers' most important assets…people, products, capital investments and processes.

2 Locations Available

Senneca Holdings

Senneca Holdings is a diversified management and holding company whose companies are focused on the specialty door industry. Senneca oversees the operations of its companies, allocates resources among them, and helps to improve the performance of its operations. Senneca seeks out acquisition opportunities that strengthen our position in a business segment as well as companies that will diversify our portfolio of specialty doors.

Note: You will always speak directly with a Senneca team member before receiving any offer of employment. Senneca will never extend a job offer without a formal interview process.

https://senneca.com/

keywords: position summary,position details,why this opportunity,security governance & risk,security awareness & training,security program management,vendor & mssp coordination,security operations oversight,experience,knowledge,skills,risk management,communication,travel,certification,education

Full Time

Overview: Senneca is seeking an Information Security Lead to own and mature the organization's cybersecurity program. This role is responsible for security governance, policy development, security awareness and training, risk management, compliance support, and the coordination of cybersecurity initiatives across the business.

The Information Security Lead will partner closely with IT Operations, Software Engineering, Data & Analytics, business leaders, and external security providers to strengthen the company's security posture while enabling business growth and operational excellence.

This is a hands-on individual contributor role with significant visibility and cross-functional influence. Reporting directly to the CIO, the Information Security Lead will play a critical role in protecting company assets, reducing organizational risk, and supporting the company's long-term cybersecurity strategy.

Why Join Us:

Benefits:

  • Company-Paid Benefits
  • Life Insurance
  • Short-Term Disability (STD)
  • Long-Term Disability (LTD)
  • 3 Weeks Paid Time Off (PTO)
  • 9 Paid Holidays
  • Paid Parental Leave

Additional Benefits:

  • 401(k) with Company Match
  • Medical, Dental, and Vision Coverage
  • Employee Discount Programs
  • Optional Supplemental Benefits
  • Career Development and Tuition Assistance
  • Diverse, Inclusive, and Welcoming Culture

Why This Opportunity

This is an opportunity to make a meaningful impact on the organization's security maturity and business resilience. You will help shape cybersecurity strategy, influence company-wide security practices, partner with executive leadership, and drive initiatives that protect critical systems, data, and operations. This role offers the autonomy to build programs, improve processes, and strengthen security across a growing organization.

Entity of type com.vizirecruiter.common.domain.model.Label with id: 7159 Entity of type com.vizirecruiter.common.domain.model.Label with id: 2173 Entity of type com.vizirecruiter.common.domain.model.Label with id: 23254

Responsibilities: Security Governance & Risk

  • Develop, maintain, and communicate information security policies, standards, and procedures.
  • Conduct periodic security risk assessments and track remediation efforts.
  • Maintain cybersecurity metrics, risk registers, and executive reporting.
  • Assist with customer security questionnaires, audits, and compliance activities.

Security Awareness & Training

  • Own the company security awareness program.
  • Lead phishing simulations and user education campaigns.
  • Promote a security-conscious culture across the organization.
  • Develop training materials and deliver security awareness education to employees.

Security Program Management

  • Drive cybersecurity improvement initiatives and roadmap execution.
  • Partner with IT Operations and application teams to implement security controls.
  • Coordinate vulnerability remediation and risk mitigation activities.
  • Evaluate and support implementation of security technologies and services.

Vendor & MSSP Coordination

  • Serve as the primary liaison to external security providers, MSSPs, and security consultants.
  • Monitor service delivery, recommendations, investigations, and remediation efforts.
  • Assist with incident response coordination when security events occur.

Security Operations Oversight

  • Review security alerts, reports, trends, and recommendations from security partners.
  • Ensure timely follow-up on identified risks and vulnerabilities.
  • Track completion of corrective actions and security projects.

Entity of type com.vizirecruiter.common.domain.model.Label with id: 23255 Entity of type com.vizirecruiter.common.domain.model.Label with id: 23256 Entity of type com.vizirecruiter.common.domain.model.Label with id: 23257 Entity of type com.vizirecruiter.common.domain.model.Label with id: 23258 Entity of type com.vizirecruiter.common.domain.model.Label with id: 23259

Requirements:

  • 5+ years of cybersecurity, information security, or IT risk management experience.
  • Experience developing security policies, standards, and governance programs.
  • Experience leading cross-functional projects and influencing stakeholders without direct authority.
  • Strong written, verbal, and presentation skills.
  • Working knowledge of cybersecurity frameworks such as NIST CSF, CIS Controls, or ISO 27001.

Education:

  • Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field.
  • CISSP, CISM, or other relevant security certifications preferred.

Preferred Qualifications:

  • CISSP, CISM, CRISC, Security+, or similar cybersecurity certification.
  • Experience working with MSSPs or managed security providers.
  • Experience in manufacturing, industrial, or multi-site business environments.
  • Familiarity with Microsoft 365, Microsoft Security solutions, Microsoft Entra ID, and endpoint security technologies.
  • Experience supporting security audits and compliance initiatives.
  • Knowledge of vulnerability management and security awareness programs.

Core Competencies:

  • Information Security Governance.
  • Cybersecurity Risk Management.
  • Security Awareness & Training.
  • Security Program Leadership.
  • Vulnerability Management.
  • Compliance & Audit Support.
  • Incident Response Coordination.
  • Cross-Functional Collaboration.
  • Vendor & MSSP Management.
  • Executive Communication & Reporting.

Impact of the Role:

The Information Security Lead directly contributes to company profitability by reducing cybersecurity risk, minimizing the likelihood of costly security incidents, and strengthening overall business resilience. Through proactive risk management, security governance, compliance oversight, and employee awareness initiatives, this role helps prevent operational disruptions, financial losses, regulatory penalties, and reputational damage. Additionally, the position enables secure business growth by implementing scalable security practices that protect critical assets while supporting operational efficiency.

Travel Requirements:

Occasional travel may be required, up to 20%.

Physical Requirements:

  • Ability to sit, stand, and walk for extended periods.
  • Ability to lift up to 20 pounds occasionally.

Entity of type com.vizirecruiter.common.domain.model.Label with id: 553 Entity of type com.vizirecruiter.common.domain.model.Label with id: 287 Entity of type com.vizirecruiter.common.domain.model.Label with id: 1143 Entity of type com.vizirecruiter.common.domain.model.Label with id: 423 Entity of type com.vizirecruiter.common.domain.model.Label with id: 33 Entity of type com.vizirecruiter.common.domain.model.Label with id: 509 Entity of type com.vizirecruiter.common.domain.model.Label with id: 580 Entity of type com.vizirecruiter.common.domain.model.Label with id: 163

About the Company

S

Senneca Holdings Inc