Manager -Regional Information Security Officer NAFTA

Aufgaben About UsWho is Mercedes-Benz Financial ServicesMercedes-Benz Financial Services part of the global company Mercedes-Benz Mobility AG is the captive financing and mobility solutions company of the global luxury automobile manufacturer Mercedes-Benz AG. We offer a comprehensive range of automotive financial and insurance products that make it easy for our customers to drive their dream Mercedes-Benz vehicle. Why work at Mercedes-Benz Financial ServicesWorking at Mercedes-Benz Financial Services is more than a job - its an opportunity to join an innovative team where you are valued for your contributions. As an employee you will experience career development in a positive employee-centric environment. Were a global company that not only offers best-in-class products to our customers but also best-in-class benefits to our employees. Our employees experience a comfortable friendly environment and relaxed inclusive culture. BenefitsWhen working at Mercedes-Benz Financial Services you will enjoy a comprehensive and amenity-rich benefits package offering something for every employee at each stage of their life.As a new employee you will have the opportunity to take advantage of the following benefits that go beyond - beginning day oneGet Rewarded Competitive salary plus an annual bonus based on company performance andor personal yearly performanceNeed a vacation How about just some time for YOU In addition to our vacation time youll receive fifteen 15 additional corporate holidays which will allow you to celebrate religious holidays or escape to the spa Designed to be flexible we let you decide which days are most important to youRide in Style - All employees are eligible to participate in the Mercedes-Benz Employee Lease ProgramWe want you to be healthy Outstanding medical dental and vision insurance employer-paid short and long term disability plus on-site exercise facilitiesIs your family growing Enjoy generous paid Family Leave Programs - Six Weeks for New Parents Adoption Expense Reimbursement Programs - up to 6k per childWant to go back to school Tuition Assistance Scholar Program - receive up to 8k in vouchers to complete business-related coursework6k for undergraduate8k for graduateJob OverviewAssure fulfillment of the Regional Information Security Officer RISO line function and lead the Information Security Team within the Mercedes Benz Financial Services Americas organization. The ISO works closely with the global Cybersecurity team and supports business units or areas in identifying and mitigating information security risks and contributes to corporate information security initiatives. The ISO is accountable for the implementation and continuous improvement of information security within the respective business unit or area. Additionally the role is responsible for securing and governing cloud and AI platforms ensuring resilient architecture compliant data usage and trusted deployment of AI capabilities across the organization.In addition the ISO provides strategic direction for cybersecurity initiatives ensuring they align with Mercedes‑Benzs global security standards regulatory frameworks such as A22.1 and Regulations for Information Security RISE 2.0 and the organizations overall risk appetite. The ISO acts as a trusted advisor to senior leadership offering insights on emerging threats security‑related business impacts and required investments to maintain resilience.The role also plays a key part in fostering a culture of security awareness across all business units. This includes partnering closely with BISOs ISAs IT Compliance Legal and broader corporate security functions to embed secure‑by‑design practices into systems processes and projects. By enabling transparency continuity and cross‑functional collaboration the ISO ensures Mercedes‑Benz operations remain secure compliant and prepared for evolving cyber risks.ResponsibilitiesStrategic Cybersecurity LeadershipDevelop and lead the enterprise‑wide cybersecurity strategy aligned with business objectives and evolving threat landscapes.Drive continuous improvement of cybersecurity maturity by assessing posture identifying gaps and leading remediation initiatives.Advise senior leadership on cyber risks emerging threats regulatory impacts and required investments.Governance Policy & Compliance ManagementDefine maintain and enforce cybersecurity policies standards procedures and architectural principles.Ensure compliance with A22 Regulations for Information Security RISE ISOIEC 27000 GDPR CCPA and other applicable regulations.Oversee risk management programs including risk identification assessment prioritization and mitigation.Govern the secure and ethical adoption of AI and emerging technologies across the enterprise.Manage exceptions deviations and escalations related to non‑compliance with security or privacy requirements.Cybersecurity Program OversightManage the implementation and continuous improvement of the enterprise information‑security program.Evaluate organizational security maturity and deliver structured improvement plans.Embed a security‑first culture through awareness education and shift‑left practices.Integrate Security‑by‑Design and DevSecOps principles across the SDLC for secure code development.Operational Security & Incident ResponseIdentify track and remediate vulnerabilities audit findings and operational security gaps.Ensure alignment with RISE requirements and contribute feedback for global improvements.Support incident‑response activities including triage containment remediation and lessons learned.Conduct Cyber Security Assessments and support internalexternal audits.Collaboration with Global Regional & Local Security StakeholdersCollaborate with Global Cyber Security GCS to ensure alignment with global security strategies and frameworks.Partner with Local Compliance and the DPOLCO to integrate data‑protection requirements into cybersecurity practices.Work with Business Information Security Officers BISOs to align security controls with business needs and risk profiles.Maintain strong communication channels across security governance bodies ensuring transparent consistent reporting.Contribute to global awareness programs ISO forums and multi‑stakeholder security initiatives.Data Protection Privacy & Information GovernanceEstablish and enforce data‑privacy controls and secure‑handling requirements aligned with regulatory and industry standards.Implement data classification protection and lifecycle governance to safeguard sensitive information.Support privacy‑by‑design and secure data‑provisioning practices e.g. masking minimization.Third‑Party & Supply‑Chain Risk ManagementLead the vendor risk‑management program evaluating and monitoring third‑party cybersecurity posture.Ensure supplier compliance with contractual security and regulatory expectations.Monitoring Metrics & ReportingMonitor IT infrastructure cloud and applications for security threats anomalies and vulnerabilities.Define and track KPIs and KRIs to measure program effectiveness.Deliver regular executive‑level reporting on risks incidents compliance and security posture.Business Continuity & Disaster Recovery BCDROversee development testing and enhancement of BCDR capabilities.Support crisis‑management processes and ensure resilience against cyber incidents outages and operational disruptions.Security Awareness & Culture BuildingDrive enterprise‑wide security‑awareness programs and targeted training initiatives.Promote a culture of shared responsibility and proactive risk mitigation across all teams.AI & Emerging Technology CybersecurityImplement AI‑specific cybersecurity controls ensuring safe ethical and compliant adoption of AI systems.Develop governance frameworks for AI risk management including model‑security reviews monitoring and red‑teaming of AI systems.Identify and mitigate risks associated with AI misuse prompt injection model poisoning data leakage and adversarial attacks.Guide cross‑functional teams on secure integration of AIML pipelines including data governance training‑data protections and secure deployment.Evaluate security implications of emerging technologies AI IoT blockchain edge computing autonomous systems and ensure secure adoption.Cloud Security & Secure Cloud ArchitectureOversee cloud‑security controls across multi‑cloud environments ensuring alignment with enterprise standards and Zero‑Trust principles.Ensure secure cloud architecture including IAM encryption network segmentation and workload protection.Collaborate with platform DevOps and application teams to embed security‑by‑design into cloud deployments and migrations.Manage cloud risks through continuous monitoring configuration governance and regular security assessments.Ensure SaaS PaaS and IaaS services follow the shared‑responsibility model and meet security and compliance requirements.Leadership & CommunicationInspire motivate and guide diverse technical and non‑technical teams while fostering strong cross‑functional collaboration.Lead day‑to‑day team operations providing coaching guidance and support to ensure high performance and professional growth.Cultivate a team culture centered on innovation knowledge sharing accountability and operational excellence.Ensure the team has the necessary skills capabilities and talent to deliver on cybersecurity and business objectives.Provide clarity and direction in ambiguous or complex situations enabling teams to execute with confidence.Drive team performance with a focus on speed agility stability and continuous improvement.Offer constructive feedback and empower team members to take ownership of their responsibilities and outcomes. Qualifikationen QualificationsApplicants must be legally authorized to work in the U.S. at the time of application. Relocation assistance will not be provided for this position.This position requires a minimum of 5 years of overall work experience. Preferred experience includesStrong background in cybersecurity including large-scale IT product rolloutsExperience with Networking Cloud-based applications Server hardeningsecurity baseline standards patch management and remediations.EducationHigh School DiplomaGED is required Bachelors Degree is preferred. Recommended majors include ComputerInformation Science or Information TechnologyCertificationsThe ideal candidate must have CISSP Certified Information Systems Security Professional. CCSP Certified Cloud Security Professional or AZ500 Azure Security Engineer are highly recommended.Additional KnowledgeKnowledge of IT guidelines and corporate IT policies IT standards knowledge of IT organization e.g. for escalation paths for non-standard requestsAbility to assess risk and implement effective security controls during and after the development process.Deep understanding of IT application architecture integration and lifecycle management.Understanding of Zero Trust Architecture ZTA AI security governance and cloud security frameworksSkillsProficiency in DevOps tools and practices coupled with deep knowledge in cybersecurity.Strong communication skills to translate complex technical concepts into business terms.Strong proficiency with common management frameworks regulatory requirements and industry-leading practicesAdditional SkillsExcellent leadership and communication skills to drive security initiatives and foster collaborationProven leadership in cross-functional environments including mentoring and team developmentContribute to overall strategy development related to IT security and IT more broadly and the businessPosting StatementIf you were not re-directed successfully after clicking the Apply for this job" button please click the following link to search and apply for the role on the local career portal httpsdaimler.taleo.netcareersectionexjobsearch.ftlMercedes-Benz Financial Services offers competitive salary performance-based bonuses and a full suite of benefits including 401K with match generous vacation and personal time a Mercedes-Benz car program as well as flexible work arrangements.EEOMinoritiesFemalesDisabledVetsLI-JM2 or LI-DNI remove if posted externally