Principal Cyber Security Specialist

About the position The Principal Cyber Security Specialist serves as a senior technical leader within the Information Security team, responsible for designing, implementing, and maintaining enterprise-wide security solutions. This role provides strategic guidance, leads complex investigations, and influences security architecture and policy. The Principal Specialist acts as a subject matter expert, collaborating across IT and business units to ensure the confidentiality, integrity, and availability of systems and data. This position will be located at our Corporate Office in Appleton, WI with in-office expectations four days/week (Monday - Thursday) with Fridays as an optional in-office or work from home day, depending on business need. Responsibilities • Lead the design and implementation of advanced security controls across infrastructure, applications, and cloud environments. • Serve as a technical advisor on enterprise security architecture, risk management, and compliance frameworks (e.g., NIST, ISO27001, PCI-DSS). • Conduct and oversee complex threat modeling, vulnerability assessments, and incident investigations. • Develop and maintain enterprise-wide security policies, standards, and procedures. • Collaborate with IT and business leaders to align security initiatives with organizational goals. • Mentor senior analysts and contribute to the development of security talent across the organization. • Evaluate emerging technologies and threats, recommending strategic investments and improvements. • Represent Information Security in cross-functional projects, audits, and executive briefings. • Build and maintain metrics and reporting frameworks to measure security posture and program effectiveness. • Participate in on-call rotations and support off-hours incident response as needed. Requirements • Bachelor's degree in Computer Science, Information Security, or related field. • 10+ years of experience in IT and security, with 3+ years in a senior or principal-level role. • Advanced certifications such as CISSP, CISM, CRISC, or equivalent. • Deep expertise in security architecture, threat intelligence, SIEM, DLP, IAM, and cloud security. • Strong understanding of attacker tactics, techniques, and procedures (TTPs). • Excellent communication and leadership skills, with the ability to influence across technical and business domains. Nice-to-haves • Master's degree in Cybersecurity or related discipline. • Experience in regulated industries (e.g., finance, healthcare, manufacturing). • Familiarity with DevSecOps and secure software development practices. Apply tot his job Apply tot his job