Business Information Security Lead (Remote)

US Foods•Rosemont, TX

6d•$100,000 - $155,000•Remote

About The Position

This position is responsible for supporting the Digital and Technology (DigiTech) value stream in the delivery of their initiatives and guiding the value stream through the needed actions to ensure security policies and best practices are met. With support from Information & Cyber Security leadership, this role assesses and validates the assurance of the security program, monitors progress, enforces resolution of outstanding issues, and focuses on strong risk management and corporate resiliency through a deep partnership and understanding of the Value Stream mission. The work for the Business Information Security Lead position is completely remote anywhere in the United States except Hawaii or United States Territories.

Requirements

At least 5+ years of information security experience
Broad foundational knowledge in many information and cyber security domains with priority given to security risk management and application security
Familiarity with compliance requirements (PCI, HIPAA, SOX, etc) and with security frameworks such as NIST CSF, ISO 27001, CIS, etc
Demonstratable experience in building positive working relationships with leaders and associates across multiple areas of the business
Must have the ability to work independently and make decisions that reflect the policies of the Information and Cyber Security Team
Experience measuring and tracking cybersecurity risks, issues, and exceptions
Ability to present complex security topics to a variety of audiences, including senior technical leaders.
Ability to advise, collaborate, and work in a team environment enabling others to trust your input and seek your guidance
Ability to influence without authority to drive desired outcomes
Experience executing security compliance plans, vulnerability management programs, risk management lifecycle, and/or security assessment/governance processes
Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively
Proactive self-development, staying current on evolving threat landscape, security trends/best practices, and dynamic regulatory requirements
Bachelor’s degree from an accredited college/university OR equivalent professional experience required
Experience developing, measuring, and tracking key performance metrics, preferably in a cybersecurity program
Highly organized, efficient, and attention to detail
Demonstrable track record of successful development of resources, mentoring, and career guidance
Strong written and verbal skills enabling effective communication with different levels of leadership

Nice To Haves

SANS GSEC, GCIA (or related), CISSP

Responsibilities

Consult on key business initiatives ensuring comprehensive end-to-end identification and risk management
Help execute the security program in collaboration with Value Stream partner by identifying and remediating risks in accordance with security policies and standards
Understand business requirements for Value Stream partner and provide security expertise to decision making and road mapping
Help Value Stream partner understand the need for security as it relates to their line of business and potential impacts, whether regulatory or possible cyber-attacks
Act as single point of contact in security for the and provide escalation path for significant security concerns and inquiries
Perform audits, assess risks, and manage/enforce remediation of issues found in security assessments, penetration tests, and internal discovery as related to Value Stream partner
Provide visibility into current security compliance status through defined set of metrics, benchmarking and providing detailed guidance on vulnerabilities
Present monthly to Value Stream Lead, sharing prioritized gap analysis, remediation plans and areas of success
Coach Product Teams to mature their understanding and use of security tools and information
Understand and articulate impacts to value stream partners in strategy and roadmap conversations within the Information and Cyber Security Team