Manager, Global Information Security

The Information Security Manager is a leader responsible for building, coaching, and enabling a high-performing information security team. This role partners with business and IT leaders to strengthen enterprise risk management, develop practical security strategies, and drive consistent execution across a global environment. The manager oversees programs including security risk assessments, exception governance, security awareness, incident coordination and investigations, and security metrics/reporting. This position manages priorities and budget, influences stakeholders, and ensures security outcomes support business objectives. Reports to the Chief Information Security Officer. This is a global role, managing the North American and European Information Security teams, and providing direction to Division Security Liaisons across PACCAR divisions. 

Job Functions / Responsibilities 

• Lead, coach, and develop a globally distributed team of information security professionals; set clear objectives, provide feedback, and support career growth. 

• Own and mature the information security risk management program, including risk assessments, third-party risk input, and risk treatment plans aligned to business priorities. 

• Run security exception governance (intake, analysis, approvals, renewals, and reporting), ensuring clear rationale and time-bound remediation plans. 

• Provide leadership and consultation across key security domains, including: 

• • Security governance, policies, standards, and control oversight 

• • Security awareness and culture-building programs 

• • Incident response, including investigations and lessons learned 

• • Internal and third-party risk assessments and remediation tracking 

• • Collaborate with product and engineering teams on product security expectations and risk-based priorities 

• • Support regulatory, audit, and compliance initiatives by providing evidence, risk narratives, and program improvements 

Qualifications 

• 5+ years of people management experience, including hiring, performance management, coaching, and leading through change. 

• 8+ years of experience in information security, technology risk, or related areas, with demonstrated progression in scope and impact. 

• Strong risk management mindset: ability to assess risk, articulate tradeoffs, and drive practical mitigation plans that enable the business. 

• Experience building and operating security governance (policies/standards, exceptions, metrics, and reporting) across a complex, multi-region organization. 

• Proven ability to influence and partner across IT, legal, privacy, audit, and business stakeholders; executive-ready written and verbal communication skills.