Director, Information Security & Compliance

Caleres•Clayton, MO

About The Position

Caleres is seeking an analytical leader to establish and oversee the company’s cybersecurity vision, strategy, architecture, and programs to effectively manage business risk. The Director will lead the information security program and enterprise cybersecurity risk management, set security architecture and control standards, oversee regulatory and compliance activities, and provide executive leadership with clear reporting on security posture and risk. The role also leads incident response and cyber resilience, third-party security risk management, vulnerability management, identity and access governance, and data protection. The Director will help assess security, privacy, third-party, and data risks related to artificial intelligence and emerging technologies, and build a high-performing security organization and culture.

Requirements

Bachelor’s degree in Information Systems or a related field.
10+ years of progressive cybersecurity experience, including prior director-level or enterprise leadership and responsibility for leading high-performing technical teams.
Experience leading and maturing cybersecurity programs based on NIST CSF, CIS, or similar frameworks.
Strong understanding of enterprise cybersecurity operations, EDR, network and cloud security, vulnerability management, security architecture, identity governance, SIEM, DSPM, and GRC.
Experience with incident response, including leading incident response activities, managing an incident response plan, and organizing or conducting annual tabletop exercises.
Strong communication and organizational skills, with the ability to translate security risk into concise executive-level presentations and decision-ready materials.
Collaborative, solutions-driven approach and commitment to continuously learning about emerging cybersecurity trends and technologies.

Nice To Haves

CISSP, CISM, CRISC, or related professional certification.

Responsibilities

Lead Caleres’ information security program, strategy, and roadmap, including policies, capabilities, budget, investments, vendors, and resources aligned with business priorities and risk reduction.
Lead enterprise cybersecurity risk management and report to executive leadership on security posture, material risks, emerging threats, performance measures, investment priorities, and mitigation plans.
Establish security architecture, control standards, and secure design requirements across cloud, applications, infrastructure, identity, and data.
Lead regulatory, policy, audit, and compliance activities, including SOX and PCI.
Lead managed detection, incident response, and cyber resilience, including provider oversight, incident command, escalation, communications, business continuity, disaster recovery, backup protection, and recovery testing.
Oversee third-party security risk and vendor relationships, partnering with Legal, Internal Audit, Human Resources, and business stakeholders on regulatory obligations, remediation, and risk decisions.
Direct vulnerability management, establish remediation SLAs, and provide clear risk and performance reporting.
Provide governance and role oversight for identity and access management, including SAP GRC and SailPoint.
Lead data protection governance, including data security posture management, data loss prevention, privacy-aligned controls, and response to data-related incidents across cloud, collaboration, endpoint, and enterprise platforms.
Participate in artificial intelligence and emerging technology governance by assessing security, privacy, third-party, and data risks and helping define safeguards for responsible adoption.
Build a high-performing security organization and culture through talent development, succession planning, internal partnerships, security awareness, and effective oversight of managed providers.