Director of Cyber Security
hace 5 días
Edison
Summary The Director of Cyber Security is a senior leadership role responsible for developing and executing a comprehensive information security strategy that safeguards the organization’s digital assets, systems, and data. This role oversees all aspects of cybersecurity operations, ensuring alignment with business objectives while maintaining regulatory compliance and operational resilience. The Director leads a multidisciplinary team—including managers, project managers, architects, analysts, engineers, and third-party providers—and collaborates closely with cross-functional stakeholders to embed security into enterprise initiatives, including digital transformation and cloud adoption. Effective communication with both technical and non-technical audiences is essential. Key challenges include staying ahead of rapidly evolving cyber threats and regulations, balancing security with business agility, managing limited resources, and fostering a culture of security awareness and engagement. The Director is expected to remain current on industry trends, emerging technologies, and best practices through ongoing learning and professional involvement. Success in this role is measured by: • Reduction in security incidents and breaches, • Compliance with relevant regulations and frameworks, • Employee participation in security awareness programs, • Improved Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR), • Completion rates of third-party risk assessments, • Positive audit outcomes and timely remediation Essential Functions The principal duties and responsibilities include, but are not limited to the following: • Strategic Leadership: Demonstrates hands-on leadership by working closely with both team members and cross-functional business units to drive alignment and deliver results. Develop and implement a comprehensive information security strategy aligned with organizational goals and regulatory requirements. Regularly review and refine the security roadmap to address emerging threats and technological advancements., • Risk Management: Identify, assess, and mitigate cyber risks across all business units and functions. Conduct security risk assessments, oversee vulnerability management, and ensure compliance with applicable laws, guidelines, and best practices., • Policy and Governance: Create, update, and enforce security policies, standards, and procedures. Establish security governance frameworks and ensure organization-wide adoption and awareness., • Incident Response: Lead the organization’s response to cyber security incidents and breaches. Develop and maintain incident response plans, coordinate cross-functional teams during incidents, and oversee post-incident analysis and reporting., • Security Operations: Supervise daily security operations, including monitoring, threat intelligence, and log analysis. Implement technical controls such as firewalls, encryption, intrusion detection systems, and endpoint protection., • Talent Management: Recruit, mentor, and manage a high-performing cyber security team. Foster professional development, provide training opportunities, and determine staffing requirements (both internal and external) to ensure defined objectives are met. Manage performance evaluations and salary administration for direct and indirect reports. Guide the professional and personal development of associates, including certifications and/or degrees as required by the role., • Budget and Resource Management: Oversee the cyber security budget, ensuring resources are allocated efficiently to maximize risk reduction. Evaluate investments in technology, services, and personnel. Administer departmental operating and capital budgets., • Stakeholder Communication: Serve as the primary liaison between executive leadership and the cyber security function. Deliver clear, concise reports and recommendations to leadership, regulators, and the board of directors., • Vendor and Third-Party Security: Evaluate and manage security risks associated with vendors, partners, and supply chain entities. Lead third-party risk assessments and integrate findings into the broader risk management strategy., • Vendor and Third Parties: Evaluate and manage vendors, partners, and third-party managed service providers., • Awareness and Training: Develop and deliver organization-wide security awareness programs. Promote a culture of security by educating staff at all levels on their role in protecting information assets. Ensure completion of required company compliance training programs. Communicate and promote the code of ethics and business conduct. Direct project presentations for recommendations and updates to staff, management, Committees, and Membership. Include associates, when possible, to provide exposure and encourage them to build relationships with management and membership. Qualifications • Education: Bachelor’s degree in Computer Science, Information Security, Information Technology, or related field required; Master’s degree preferred., • Certifications: CISSP, CISM, CISA, or equivalent industry-recognized certifications., • Experience: 10+ years of progressive experience in information security, with at least 3 years in management or leadership role., • Technical Expertise: Deep understanding of security architecture, networks, applications, cloud computing, and endpoint security. Familiarity with current threat landscapes, attack vectors, and mitigation strategies. Information/Data Protection & Identity and Access Management, • Regulatory Knowledge: Experience with data privacy laws and security frameworks such as GDPR, HIPAA, SOX, ISO 27001, NIST, and PCI-DSS., • Project Management: Demonstrated success in leading cross-functional projects, managing timelines, budgets, and deliverables., • Communication: Exceptional written and verbal communication skills, with the ability to translate technical concepts for non-technical audiences along with strong presentation skills., • Leadership: Proven ability to inspire, lead, and develop teams in a fast-paced, evolving environment., • Experience managing budgets for acquisition of equipment, maintenance and services., • Develops the team and mentors' talent to deliver the technology management and execution capabilities of the organization. Enable a constantly learning environment., • Experience with comprehensive technology delivery that is secure and reliable including disaster recovery architecture and operations storage area network and redundant, highly available server and network architectures., • Collaborative and Innovative leader comfortable with working in a dynamic environment, • Strong delivery and customer focus with attention to detail and quality, • Ability to act decisively and work well while directing multiple projects and operational activities simultaneously, • Strong interpersonal and organizational skills to effectively liaise with staff in all areas and levels of the organization, • Proven ability to foster collaboration, value others perspective and gain support and buy-in from stakeholders, • Proven success in managing growth and leading change in a fast-paced organization, • Strong organizational, analytical, and critical thinking skills that result in conclusive recommendations and sound decisions Working Conditions & Physical Demands • Availability to work a varied, flexible schedule to meet business demands, • Ability to monitor computer screens for long periods of time, • Able to occasionally travel and be available after hours in response to security incidents or critical projects, • Ability to work a hybrid schedule as established by the division with a minimum of 4 days on-site Core Competencies • Communicate Effectively: Communicates thoughts and ideas in a well-organized manner, encouraging two-way communication., • Build Relationships: Creates cross-functional partnerships through the development and maintenance of constructive and cooperative relationships., • Stay Competitive: Demonstrates a mindset of continuous improvement while exhibiting passion and enthusiasm for their work., • Embrace Change: Looks for new ways of working by supporting advancements in processes and technology., • Develop You: Identifies and capitalizes on opportunities for personal and professional career growth., • Drive for Results: Supports divisional and strategic objectives through achievement of work goals. Leadership Competencies • Think Strategically: Create a compelling vision, develop a strategy and empower others to achieve it, • Influence Others: The ability to effectively collaborate, inspire, persuade and align others, • Drive Change: Create the vision and drive the momentum for change, • Talent Planning: Build organizational and associate capability to achieve business goals, • Take Accountability: Drive a culture of ownership throughout the organization, • Inclusive Leadership: Role model inclusive leadership to leverage diversity Company Perks • Vibrant Food Centric Culture, • Comprehensive medical, dental and vision package, • Competitive Salary and Paid Time Off, • Fitness Reimbursement and Well-Being Program, • Corporate Training and Development University, • Collaborative team environment, • Paid Parental Leave, • 401K, • Matching Gifts and Community Volunteer Involvement Compensation and Benefits The salary range for this position is $180,000-$220,000 annually. Placement in the range depends on several factors, including experience, skills, education, geography, and budget considerations. Wakefern is proud to offer a comprehensive benefits package designed to support the health, well-being, and professional development of our Associates. Benefits include medical, dental, and vision coverage, life and disability insurance, a 401(k) retirement plan with company match & annual company contribution, paid time off, holidays, and parental leave. Associates also enjoy access to wellness and family support programs, fitness reimbursement, educational and training opportunities through our corporate university, and a collaborative, team-oriented work environment. Many of these benefits are fully or partially funded by the company, with some subject to eligibility requirements.
