Director of Cyber Security (HYBRID) Bolingbrook - IL

S&S Activewear•Bolingbrook, IL

33d•$210,000 - $220,000•Hybrid

About The Position

The Director of Cyber Security will serve as the enterprise-wide leader for cybersecurity, data protection, and privacy, advancing the company’s programs as the business grows. The role protects systems supporting high-volume B2B operations, including eCommerce platforms, ERP systems, technology integrations, and warehouse and logistics technologies. It balances risk management with operational speed while protecting sensitive customer, vendor, and employee information and enabling business growth, innovation, and customer trust. The position owns security strategy, architecture, and program execution across on-premises, cloud, SaaS, and internally developed platforms. It also leads the company’s privacy program in collaboration with Legal and serves as its Data Protection Officer. Audit and regulatory obligations—including PCI, SOX, U.S. privacy laws, and potential future SOC 2—inform the work, while success is measured by durable risk reduction, effective business enablement, and scalable security operating models. The role leads security operations and incident response, AI security and emerging technology governance, compliance and audit enablement, business continuity and disaster recovery planning, vendor risk management, and the internal security team. It partners closely with IT, engineering, Legal, Compliance, Finance, and business leaders, and communicates risks and tradeoffs in clear business terms. The position is based in Bolingbrook, Illinois, with a hybrid schedule: office attendance Mondays, Wednesdays, and Fridays and work from home Tuesdays and Thursdays, subject to change based on business needs. The schedule is Monday through Friday, exempt, and full-time. The stated pay range is $210,000–$220,000 with bonus potential.

Requirements

At least 10 years of cybersecurity experience, including leadership of multidisciplinary programs and significant exposure to data privacy.
Experience as a CISO, Head of Security, or in an equivalent executive role.
Proven ability to design and operate durable security operating models.
Strong knowledge of security frameworks such as NIST, ISO 27001, and CIS, and privacy laws such as PIPEDA and CCPA/CPRA.
Experience leading incident response and breach management.
Experience working in regulated, growth-oriented environments.
Ability to represent complex security perspectives to senior leadership and external stakeholders.
Strong judgment in balancing risk, cost, and long-term sustainability.
Experience in cloud security (AWS, Azure, or GCP) and modern architecture.
Maintain at least one cybersecurity certification, such as CISSP, CISA, or CISM.

Responsibilities

Own the cybersecurity roadmap and guide the program’s evolution over multiple years.
Translate business objectives and technology strategy into practical security priorities, balancing risk reduction, operational efficiency, and business agility.
Establish and mature practical, scalable governance processes integrated into company operations.
Define and maintain security architecture principles and standards across on-premises, cloud, SaaS, and internally developed platforms, including the ERP.
Promote consistent control design and embed security early in technology and application decisions.
Manage and advance the data privacy program in collaboration with Legal, and serve as the organization’s Data Protection Officer.
Establish data governance, classification, retention, and protection practices; maintain an inventory and mapping of customer, vendor, employee, and logistics data flows.
Lead privacy impact assessments and embed privacy-by-design into systems and processes.
Manage data subject access, deletion, and correction requests; oversee privacy practices involving employee data and applicable employment-related privacy obligations.
Provide guidance on monitoring technologies and workplace data, and assess the operational impact of evolving privacy regulations.
Lead security operations, including threat detection, vulnerability management, endpoint security, and incident response.
Own the incident response program and lead security incidents; coordinate breach notifications with Legal and Communications.
Conduct post-incident reviews, improve response processes, and provide executive leadership with regular reporting on cyber risk, incidents, and remediation.
Own the Cyber Insurance Program.
Partner with technology, Legal, data, and business leaders to establish practical AI security and risk management, including guardrails for internal solutions and third-party AI features.
Identify and manage AI risks involving data exposure, model misuse, access control, and integrity; define policies and controls for responsible AI adoption.
Partner with IT, Legal, Compliance, and Finance on PCI, SOX, future assurance activities, regulatory inquiries, and investigations.
Design maintainable controls and promote repeatable audit readiness.
Own and enforce the maintenance and testing of business continuity and disaster recovery plans.
Lead and develop the internal security team across engineering, privacy, and compliance; establish expectations, priorities, and development paths, and make cases for team growth or external augmentation when appropriate.
Establish security and privacy governance; collaborate with product, engineering, and business teams on secure and privacy-conscious innovation.
Lead organization-wide security awareness and privacy training programs and policies.
Manage third-party and vendor risk, including security and privacy assessments.
Serve as the primary security partner to IT leadership and senior engineering leaders; explain risks and tradeoffs in business terms and build trust and alignment.
Expand strategic influence as the business grows and adapt the security program to new technologies and risks while emphasizing durable outcomes.