Sr. Director, IT Security - Dublin, CA

ABOUT US

We are California's largest regional, full-service grocery chain, founded over 70 years ago in Modesto, California, where our headquarters are still located today. With 194 stores across Central and Northern California and Western Nevada, our banners-Save Mart, Lucky, and FoodMaxx-are cherished regional brands, serving the unique needs of their communities.

It's our 12,000 passionate associates who make our company a great place to work and shop. We prioritize investing in our people, stores, and neighborhoods, and work closely with local suppliers to bring fresh, quality products at affordable prices to our customers. Shoppers can access our offerings in-store, online, or through convenient home delivery and curbside pick-up.

The Save Mart Companies is part of The Jim Pattison Group, a family-owned, diversified holding company operating primarily in the U.S. and Canada and headquartered in Vancouver, BC. The Jim Pattison Group has a long-term strategic focus to see their companies succeed and grow. Together, our dedication to our associates and customers, commitment to growth and innovation, and our family traditions continue to thrive.

We are currently recruiting for the position of:

Sr. Director, IT Security - Dublin, CA

The Sr. Director of IT Security will be responsible for developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity and IT risk management program. The Sr. Director, IT Security will provide the vision and leadership necessary to manage the risk to the organization and will ensure business alignment, effective governance, system and product availability, integrity and confidentiality. Under their leadership they will be accountable for the companies vulnerability protection, incident response, security operations center, data loss protection create and implement company security policies, controls and procedures. They will establish monitor and track the company's security posture based on security control measurements.

Key Responsibilities and Accountabilities:

• Responsible for the corporate security posture ensuring the protection of networks, systems, applications, data and physical security.
• Lead development of the enterprise wide security program ensuring it is strategically aligned to mitigate current and future security risks.
• Understand the threat landscape and adjusts the program periodic basis to ensure it addresses the changing security environment.
• Establish a Security Operations function and provide leadership to security monitoring and incident response of cyber security events.
• Oversee the investigation of reported security breaches, determine what went wrong in a breach, and plan to avoid repeats of the same crisis.
• Advises and shares metrics and analysis with business groups to optimize visibility of security risks and mitigation efforts.
• Manage the information security organization as part of the company security compliance office.
• Direct and approve the design of security systems.
• Create, and implement security policies, controls and procedures.
• Ensure the consistent application of security policies and standards across all technology projects, devices, systems and services.
• Manage recurring verification of the vendor security risk profile.
• Ensure compliance with the changing laws and applicable regulations.
• Ensure IT, applications, network and store infrastructure are designed with best security practices in mind.
• Deliver new security technology approaches and implement next generation solutions for cloud security, identity and access management, email security, data loss prevention, vulnerability management, and threat intelligence.
• Develop and implement business continuity plans to ensure service is continuous.
• Work directly with the business units to facilitate risk assessment and risk management processes.
• Assist with documentation that supports attestations, RFPs and Risk assessment questionnaires specifically for technology vendors.
• Manage all teams, employees, contractors and vendors involved in IT security.
• Provide training and mentoring to security team members.
• Lead the development and delivery of information security awareness training program.

Some of our competitive offerings include generous benefits packages (Health, Dental, Vision, Life and AD&D, 401K), tuition reimbursement and scholarship opportunities, vacation and personal holidays, and in-store purchase discounts.

Hiring pay range: $191,212.00 - 230,000.00

Requirements (Knowledge, Skills and Abilities):

• Proven experience leading an IT Security organization, a broad and detailed understanding of security centric technology and Cisco tools, security risk management, threat landscape and threat mitigation strategies
• Experience with Cloud security, Infrastructure security, elastic computing across virtualized environments and related Cybersecurity risk identification and management
• Understands and actively seeks use of metrics and critical thinking to guide messages and make decisions
• Knowledge and experience in state and federal information security laws, including but not limited to HIPAA, including NIST, PCI, CCPA and all other applicable regulations.

Experience: 12 Years Information security experience working in a corporate environment, 10 Years Management, supervisory and/or leadership experience

Education: 4 Year/Bachelors Degree and/or equivalent experience/training in a Computer Science, IT Security, Engineering, or Information Technology field

Licenses & Certifications: Certifications in security such as CISSP, CISA, and Cisco Certified Network Professional Security required

Work Environment: Office

Reference: req38875

Follow us:
Instagram: @savemart
Facebook: Save Mart
YouTube: @savemartsupermarkets
LinkedIn: The Save Mart Companies

The Save Mart Companies is an Equal Opportunity Employer, and we welcome resumes from individuals who will contribute to our diverse workforce.