Director - Information Security

Gallo•Modesto, CA

1d•Hybrid

About The Position

Join GALLO as our Director of Information Security and lead an enterprise-wide program that protects the availability, integrity, and confidentiality of critical information assets. In this highly visible leadership role, you will partner with executive management to establish acceptable levels of organizational risk while ensuring our information systems remain secure, resilient, and fully functional. You will develop and advance a comprehensive information security and IT risk management strategy, oversee security governance, and guide the creation of policies, standards, controls, and awareness programs. Your leadership will help safeguard intellectual property, regulated data, business information, and GALLO’s reputation while supporting compliance with applicable laws, regulations, and industry standards. As a trusted advisor, you will communicate cyber risk and program performance to senior leaders, enterprise risk teams, and the board of directors. You will lead incident and emerging-threat response, strengthen vendor risk management, and provide strategic security guidance for technology initiatives across the organization. You will also build, coach, and inspire a high-performing information security team. By collaborating with technology, privacy, compliance, audit, legal, human resources, and business continuity partners, you will promote shared accountability and enable secure business growth. This is an opportunity to shape the future of information security at GALLO through bold thinking, sound judgment, and a commitment to continuous improvement.

Requirements

Bachelor's degree in Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 10 years of information security experience to include supervisory or managerial experience reflecting increasing levels of responsibilities; or 14 years of information security experience to include supervisory or managerial experience reflecting increasing levels of responsibility.
Basic MS Access skills.
Intermediate MS Word, Excel and PowerPoint skills.
Required to travel to company offices, sites, and/or meeting locations for onboarding, training, meetings, and events for development, department needs, and business delivery up to 5% of the time, with or without reasonable accommodation.
Required to be 18 years or older.

Nice To Haves

Bachelor's degree in Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 12 years of information security experience in a combination of risk management, information security and IT jobs to include supervisory or managerial experience reflecting increasing levels of responsibility.
Master’s degree.
Certified Information Systems Security Professional (CISSP).
Experience responding effectively to the most sensitive inquiries or complaints.
Experience writing speeches and articles using original or innovative techniques or style.
Experience making effective and persuasive speeches and presentations on controversial or complex topics to top management, public groups, and boards of directors.
Experience working with all levels and functions within the Company and effectively presenting ideas to Senior Management via discussions and presentations.
Poise and ability to act calmly and competently in high-pressure, high-stress situations.
Critical thinker, with strong problem-solving skills.
Experience resolving conflict as well as manage customer expectations.
Project management skills: financial/budget management, scheduling and resource management.
Experience leading and motivating cross-functional, interdisciplinary teams to achieve tactical and strategic goals.

Responsibilities

Lead an enterprise-wide program that protects the availability, integrity, and confidentiality of critical information assets.
Partner with executive management to establish acceptable levels of organizational risk.
Ensure information systems remain secure, resilient, and fully functional.
Develop and advance a comprehensive information security and IT risk management strategy.
Oversee security governance.
Guide the creation of policies, standards, controls, and awareness programs.
Safeguard intellectual property, regulated data, business information, and GALLO’s reputation.
Support compliance with applicable laws, regulations, and industry standards.
Communicate cyber risk and program performance to senior leaders, enterprise risk teams, and the board of directors.
Lead incident and emerging-threat response.
Strengthen vendor risk management.
Provide strategic security guidance for technology initiatives across the organization.
Build, coach, and inspire a high-performing information security team.
Promote shared accountability and enable secure business growth by collaborating with technology, privacy, compliance, audit, legal, human resources, and business continuity partners.