Philip Morris International U.S. · 15 hours ago
Director, Information Security U.S.
Philip Morris International (PMI) is transforming its business with a clear purpose to deliver a smoke-free future. The Director, Information Security U.S. is responsible for leading the information security strategy and overseeing operations to protect PMI's data and assets across the U.S.
Consumer Goods
Responsibilities
Serve as the Head of Information Security for the U.S., building strong stakeholder relationships and promoting a secure-by-design mindset
Advise senior market leadership and key stakeholders on cyber risks and priorities across regions
Represent regional needs and viewpoints in global security strategy discussions
Contribute to developing and implementing PMI’s global security strategy from a regional perspective
Strengthen affiliations with IT leadership, assurance teams, and the broader Information Security organization
Support the definition of the cyber risk program and ensure alignment with regional business needs
Drive continuous improvement of security governance structures across regions and report updates to global committees and regional leaders
Lead execution of the Global Security Program and harmonize security practices and maturity across markets
Partner with global teams to implement a regional security engagement strategy
Ensure regional adherence to PMI’s security policies and standards, incorporating local regulatory requirements
Manage Regional Information Security Officers and Regional Security Services teams
Enable markets to implement security practices that meet global standards and policies (“Build Secure”)
Ensure completion of cyber risk and maturity assessments across all regions (“Stay Secure”)
Oversee identification and management of cyber and information security risks in alignment with PMI’s risk appetite
Lead regional execution of cyberattack simulations, table‑top exercises, and crisis management activities
Strengthen security awareness and ownership through ongoing training and communication initiatives
Shape PMI’s security strategy for AI/ML technologies, working with global InfoSec and IT Engineering teams
Help define governance frameworks for ethical and compliant AI implementation
Assess emerging AI-related risks and advise senior leaders on mitigations
Leverage AI-driven tools to enhance threat detection, anomaly monitoring, and predictive risk analysis
Qualification
Required
16+ years of experience in information security, technology, or related fields, with a strong track record in security and risk leadership
Bachelor's degree (Computer Science preferred)
Proven ability to engage, influence, and communicate with top executives in global and domestic environments
Excellent written and verbal communication skills; ability to simplify technical concepts for non-technical audiences
Strong knowledge of relevant legal and regulatory requirements
Expertise with frameworks such as NIST, ISO 27001, SOX, PCI DSS, GDPR, COBIT, and ITIL
Exceptional leadership abilities, including motivation of interdisciplinary and geographically dispersed teams
Ability to travel 10–15%
Fluent in English
Legally authorized to work in the U.S
Preferred
Professional certifications such as CISSP, CISM, or similar are preferred
Benefits
Great medical, dental and vision coverage
401k with a generous company match
Incredible wellness benefits
Commuter benefits
Pet insurance
Generous PTO