About this opportunity
Caleres lists this Director, Information Security & Compliance opportunity in clayton, Missouri. Review the employer’s description below for duties, qualifications and application requirements.
Job description
We seek an analytical leader passionate about designing innovative security solutions to join our IT team. In this critical leadership role, you’ll establish and oversee our company’s cybersecurity vision, strategy, architecture and programs to effectively manage risk for our business.
We are Caleres, a global footwear company with brands that fit people’s lives. We are ferocious about fit and living our mission of inspiring people to feel great…feet first.
We seek people who:
Lead Caleres’ information security program, strategy and roadmap, including policies, capabilities, budget, investments, vendors and resources aligned with business priorities and risk reduction
Lead enterprise cybersecurity risk management and provide executive leadership with clear reporting on security posture, material risks, emerging threats, performance measures, investment priorities and mitigation plans
Establish security architecture, control standards and secure design requirements across cloud, applications, infrastructure, identity and data while leading regulatory, policy, audit and compliance activities, including SOX and PCI
Lead managed detection, incident response and cyber resilience, including provider oversight, incident command, escalation, communications, business continuity, disaster recovery, backup protection and recovery testing
Oversee third-party security risk and vendor relationships, partnering with Legal, Internal Audit, Human Resources and business stakeholders on regulatory obligations, remediation and risk decisions
Direct vulnerability management, establishing remediation SLAs and providing clear risk and performance reporting
Provide governance and role oversight for identity and access management, including SAP GRC and SailPoint
Lead data protection governance, including data security posture management, data loss prevention, privacy-aligned controls and response to data-related incidents across cloud, collaboration, endpoint and enterprise platforms
Participate in artificial intelligence and emerging technology governance by assessing security, privacy, third-party and data risks and helping define safeguards for responsible adoption
Build a high-performing security organization and culture through talent development, succession planning, internal partnerships, security awareness and effective oversight of managed providers
We seek people with these qualifications:
Ba chelor’s degree in Information Systems or related field
CISSP, CISM, CRISC or related professional certification preferred
10+ years of progressive cybersecurity experience, including prior director-level or enterprise leadership and responsibility for leading high-performing technical teams.
Experience leading and maturing cybersecurity programs built on NIST CSF, CIS or similar frameworks.
Strong understanding of enterprise cybersecurity operations, EDR, network and cloud security, vulnerability management, security architecture, identity governance, SIEM, DSPM, and GRC.
Experience with Incident Response; leading IR activities, managing IR plan, organizing/conducting annual tabletop exercises.
Strong communication and organizational skills, with the ability to translate security risk into concise executive-level presentations and decision-ready materials
Collaborative, solutions-driven and committed to continuous learning about emerging cybersecurity trends and technologies
#J-18808-Ljbffr
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.