Director of Information Security

The Fresh Market Inc • Greensboro, NC

2d

About The Position

The Fresh Market currently has an opening for a Director of Information Security in our Store Support Center, located in Greensboro, NC. The Director of Information Security serves as The Fresh Market’s expert on Information Security and oversees the company’s Risk Management Framework. The Director will work in partnership with various internal functions to develop strategies and approaches to ensure compliance with laws and regulations and protect the Company’s IT environment.

Requirements

• Bachelor’s degree in Computer Science or Information Systems, or related field.
• 8-10 of experience in Information Security.
• Professional certification, e.g. CISSP, CISM, CISA, CGEIT is required.
• Experience managing risk within a complex network with multiple environments, including hosted environments.
• Competencies with Access Control, Data Privacy, Data Security, Security Architecture and Models, Data Security Software, Incident Response Software and Security Information and Event Management (SIEM) Software.
• In-depth understanding of network and system security technology and practices across all major-computing areas (public cloud, client/server, WAN, PC/LAN, telephony).
• Strong organizational skills and attention to detail.
• Excellent written and verbal communications skills.
• Ability to prioritize and manage multiple tasks simultaneously.

Nice To Haves

• Retail or CPG industry experience.
• Background in Agile or Organizational Change Frameworks, e.g., ADKAI.

Responsibilities

• Assist the Chief Information Officer in developing a strategic vision for improving information security and develop tactical plans that implement the long-term vision.
• Develop and implement appropriate activities to evaluate, monitor, and manage third-party data processors.
• Lead the Company’s overall cybersecurity and data privacy governance/compliance efforts (including PCI-DSS, NIST, CCPA, GDPR, as applicable) in collaboration with other key senior management stakeholders, including Legal, HR, IT, Marketing, and Operations.
• Develop and implement appropriate safeguards to ensure protection of the enterprise’s assets and secure data and networks.
• Develop and implement the appropriate activities to identify the occurrence of a cybersecurity event.
• Develop and implement the appropriate activities to take action regarding a detected cybersecurity event.
• Develop and implement the appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity event.
• Monitors information security and disaster recovery programs for compliance with organizational information security standards and maximize the programs’ effectiveness.
• Foster a learning environment to increase organization awareness to cyber security threats and good behaviors to assist with maintaining a secure environment.
• Partner with leaders throughout the Company to ensure they understand the risks associated with the systems and data within their area.
• Assess and analyze the Company’s systems environment to identify risk exposures and develop and implement mitigating controls.
• Develop policies as needed to ensure process owners understand their responsibilities and ensure best practices are deployed across all system environments.
• Serve as an information security consultant to the organization for all departments and appropriate entities.

Benefits

• Team member discount up to 40%
• Health, Dental & Vision insurance available for individual, spouse, partner, and family.
• 401K contribution and match for part-time and full-time team members.
• Personal time off and additional time off purchase plans available.
• And much more!

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Number of Employees: 5,001-10,000 employees