Director, Data & Applications Security

Smithfield Foods•Smithfield, VA

2d•$160,000 - $202,500

About The Position

The position summary states the general nature and purpose of the job. Overall accountabilities are defined in this section. As the Director, Data and Applications Security, you will lead the development and implementation of enterprise-wide data protection strategies and secure software development practices. This role oversees the creation of data security policies, governance frameworks, and secure architecture for applications and integrations across Smithfield’s technology landscape. Key responsibilities include defining data taxonomy, implementing cryptographic safeguards, managing application and API security, and transitioning the Secure Software Development Lifecycle (SSDLC) into a compliant and sustainable operating model. You will also be responsible for integrating tools such as Cloud Access Security Broker (CASB) into Smithfield’s data protection ecosystem, ensuring both proactive risk mitigation and alignment with corporate cybersecurity goals.

Requirements

Bachelor’s degree from an accredited four-year college or university and 10+ years of relevant experience in Data & Applications Security; or equivalent combination of education and experience required.
5+ years of demonstrated experience in team management/development required.
CISSP, CISM, or equivalent certification is required.
Experience working in multinational organizations with complex, integrated IT and OT environments.
Proven knowledge in data classification strategies, high-risk data handling, data masking, tokenization, encryption, and cryptographic controls.
Knowledge and experience implementing, managing, and assessing AI risk and governance frameworks.
Deep understanding of Secure Software Development Lifecycle (SSDLC), code review methodologies, and static/dynamic code analysis.
Strong background in risk management, cybersecurity strategy development, and implementation of related technologies and tools.
Working knowledge of SABSA, TOGAF, NIST, ISO 27000, and familiarity with OWASP Top 10, SANS 25, MITRE ATT&CK, and CWEs.
Excellent written and verbal communication skills, with the ability to effectively engage and negotiate across all levels of the organization.
Respects others, works well in fast-paced environments, and builds strong, team-oriented relationships.

Nice To Haves

MS IT or MBA preferred.

Responsibilities

Regularly meet with the CISO and align with Data Services and Infrastructure leadership to ensure strategic alignment, business satisfaction, and continuous improvement in cybersecurity services.
Develop and implement enterprise-wide data classification, taxonomy, and governance policies to drive consistent data protection and compliance.
Develop, manage, monitor, and deploy the enterprise strategy and tools for data loss prevention.
Identify, measure, and minimize security risks across application, database, network, host, artificial intelligence, and cloud environments with a focus on data and application security.
Assess the effectiveness of current data security capabilities, identify gaps, and develop a comprehensive security strategy and execution roadmap.
Collaborate with IT and OT leaders to manage vulnerabilities in systems supporting data and application functions.
Manage security vendor relationships and evaluate the effectiveness of products and services related to data and application protection.
Support internal and external cybersecurity audits for systems and service providers to ensure regulatory and policy compliance.
Set direction, manage, and support software and hardware asset management standards, capabilities, and reporting.
Drives a positive employee experience through leadership by way of employee development and coaching.