Job Description
Job Summary
The primary purpose of this role is to manage a team focused on defining, implementing and/or maintaining processes and tools that support enterprise technology security. This includes accountability for optimizing performance of services that span security and technology domains, including Operations, Policy, Governance and Delivery.
In addition, this role provides insight and recommendations to inform the ongoing strategy for health and care of assigned security processes and tools.
This individual manages people which includes responsibility for setting individual and team expectations, delegating assignments and managing performance, identifying talent needs, and coaching and developing team members.
With a focus specifically on Network Security Engineering, this role manages the technical aspects of developing, implementing and maintaining security infrastructure systems within various computing environments. This role manages team(s) through all system development lifecycle phases and provides insight and recommendations to inform the ongoing strategy for health and care of assigned domain(s) and/or platform(s).
With a focus specifically on Security Threat & Vulnerability, this role manages a team and associated processes focused on vulnerability identification or remediation. This includes providing day-to-day management of information security and risk activities, including oversight of vulnerability assessments and remediation programs serving both internal and external stakeholders.
Qualifications
Minimum Qualifications
Bachelors Degree in Computer Science, CIS, Engineering, Business Administration, Cybersecurity, or related field (or equivalent work or military experience in a related field)
10+ years IT experience with a broad range of exposure to all aspects of business/system planning, analysis, and application development
10+ years of experience leading project or technical teams with or without formal direct report responsibility; this includes experience providing technical direction, thought leadership, coaching and mentoring to team members
10+ years of experience with information security tools, concepts and practices
Familiarity with multi-platform technology environments and their operational/security considerations
Experience managing projects and project resources to meet goals on simultaneous/multiple projects
Preferred Qualifications
Master s Degree in Computer Science, CIS, Engineering, Business Administration, Cybersecurity, or related field
IT experience in the retail industry
Relevant information security certifications (e.g., CISSP, CISM, CEH, PCI ISA, CRISC, CISA, OSCP, GPen)
Experience in a PCI/Retail technology environment
Leadership experience with direct report responsibility
Experience managing in an Agile environment
Experience leading global teams
Experience with process management methodologies such as Six Sigma or ITIL Delivery methodologies (Agile, Scrum, SAFe)
Broad knowledge of infrastructure (network and servers), network architecture, services and security policies
Security Governance, Risk & Compliance
4 years of experience in one or more of the following fields: technical, security or privacy education/training, information security, external/internal audit, risk management (specific to Security Governance, Risk and Compliance role)
3 years of experience conducting or leading PCI-DSS assessments (specific to Security Governance, Risk and Compliance role)
Network Security Engineering
10+years of experience in Security Engineering (specific to Security Engineering role)
Advanced knowledge of core Information Security concepts related to security infrastructure components (specific to Security Engineering role)
Knowledge of retail regulatory scope (PCI, SOX, etc.) (specific to Security Engineering role)
5 years of experience in Security Engineering (VPN, layer 4 to layer 7 firewalls, etc.) (specific to Security Engineering role)
Security Threat & Vulnerability
6 years of experience in Information, Network, or Application Security (specific to Security Threat & Vulnerability role)
Advanced knowledge of core Information Security concepts related to Threat and Vulnerability Management or Offensive security testing (specific to Security Threat & Vulnerability role)
- Knowledge of retail regulatory scope (PCI, SOX, etc.) (specific to Security Threat & Vulnerability role)
More Info
About Company
