Manager, Global Information Security

The Information Security Manager is a leader responsible for building, coaching, and enabling a high-performing information security team. This role partners with business and IT leaders to strengthen enterprise risk management, develop practical security strategies, and drive consistent execution across a global environment. The manager oversees programs including security risk assessments, exception governance, security awareness, incident coordination and investigations, and security metrics/reporting. This position manages priorities and budget, influences stakeholders, and ensures security outcomes support business objectives. Reports to the Chief Information Security Officer. This is a global role, managing the North American and European Information Security teams, and providing direction to Division Security Liaisons across PACCAR divisions.

Job Functions / Responsibilities:

• Lead, coach, and develop a globally distributed team of information security professionals; set clear objectives, provide feedback, and support career growth.
• Own and mature the information security risk management program, including risk assessments, third-party risk input, and risk treatment plans aligned to business priorities.
• Run security exception governance (intake, analysis, approvals, renewals, and reporting), ensuring clear rationale and time-bound remediation plans.
• Provide leadership and consultation across key security domains, including: Security governance, policies, standards, and control oversight Security awareness and culture-building programs Incident response, including investigations and lessons learned Internal and third-party risk assessments and remediation tracking Collaborate with product and engineering teams on product security expectations and risk-based priorities Support regulatory, audit, and compliance initiatives by providing evidence, risk narratives, and program improvements

Qualifications:

• 5+ years of people management experience, including hiring, performance management, coaching, and leading through change.
• 8+ years of experience in information security, technology risk, or related areas, with demonstrated progression in scope and impact.
• Strong risk management mindset: ability to assess risk, articulate tradeoffs, and drive practical mitigation plans that enable the business.
• Experience building and operating security governance (policies/standards, exceptions, metrics, and reporting) across a complex, multi-region organization.
• Proven ability to influence and partner across IT, legal, privacy, audit, and business stakeholders; executive-ready written and verbal communication skills.
• Demonstrated leadership in incident response coordination and investigations, with a focus on decision-making, communication, and continuous improvement.
• Strong prioritization and program management skills; able to manage multiple workstreams, dependencies, and timelines in a dynamic environment.
• Budget and vendor management experience, including defining outcomes, tracking performance, and managing renewals and contracts in partnership with procurement.
• Relevant certifications (e.g., CISSP, CISM, CRISC, Security+) are preferred but not required; equivalent experience is valued.
• Working knowledge of core security domains (identity and access management, network and endpoint security concepts, logging/monitoring, and data protection).
• Technical depth is less important than leadership and sound risk judgment.
• Education Bachelor's degree in information systems, computer science, business, or a related field.

PACCAR is a Fortune 500 company established in 1905. PACCAR Inc is recognized as a global leader in the commercial vehicle, financial, and customer service fields with internationally recognized brands such as Kenworth, Peterbilt, and DAF trucks. PACCAR is a global technology leader in the design, manufacture and customer support of high-quality light-, medium- and heavy-duty trucks under the Kenworth, Peterbilt and DAF nameplates. PACCAR designs and manufactures advanced diesel engines and also provides customized financial services, information technology and truck parts related to its principal business.