Information Security SR Manager, Infrastructure

Dollar General • Goodlettsville, TN

99d

About The Position

The Senior Manager will play a pivotal role in maintaining the safety and integrity of the Company's infrastructure and data. This role requires an individual with a robust background in the management of infrastructure security, who is also a strategic thinker with exceptional problem-solving capabilities. They must possess superior leadership skills in both technology and people management, capable of motivating teams into action. Their communication skills will be vital in conveying security concepts in a clear, concise manner across technical and non-technical layers of the company, whether in person or in writing.

Requirements

• College degree or equivalent experience in information security.
• Minimum seven years of information security experience with at least five years focused on infrastructure security.
• At least three years in an information security management role with a proven record of managing and leading a team of security professionals.
• Extensive hands-on experience with data, network, and system security tools and technologies.
• Strong understanding of security frameworks and standards, such as NIST and ISO 27001.
• Hands-on experience with cloud security and similar emerging technologies.
• Hands-on experience with security automation and orchestration tools.
• Hands-on experience with security incident response and management.
• Knowledgeable about third-party risk management.
• Knowledgeable about DevSecOps practices and principles, specifically infrastructure as code.
• Understanding of data privacy regulations and their impact on infrastructure security.

Nice To Haves

• Active CISSP, CISA, or CISM certification.
• Work experience in an enterprise-class environment.

Responsibilities

• Develop and lead the implementation of the Infrastructure Security team's strategies in a pragmatic, risk-focused mindset.
• Drive compliance with internal security standards and applicable regulatory requirements.
• Work as part of the information security leadership team to administer information security program.
• Recommend, implement, administer, and support appropriate security controls to meet evolving information security objectives.
• Manage infrastructure security team personnel and associated programs.
• Lead the development and implementation of infrastructure security controls to protect the Company's infrastructure and data assets.
• Maintain applicable regulatory infrastructure security control requirements.
• Collaborate with other departments to integrate appropriate security measures into the Company operations.
• Develop and maintain applicable security standards and procedures.
• Remain current with the latest security trends, technologies, techniques, and best practices.
• Oversee the implementation and management of security tools and technologies.
• Coordinate and manage security appropriate incident response activities.
• Manage relationships with external security vendors and service providers.
• Participate in the development and execution of applicable disaster recovery and business continuity plans.
• Monitor and report on the effectiveness of security measures and make recommendations for improvements.
• Manage and develop an effective, pragmatic infrastructure security team.
• Represent the information security department through pragmatic consultation and participation in a defined SDLC.
• Promote security best practices via awareness and leadership by example.
• Monitor compliance with policies and regulatory requirements.
• Maintain audit readiness and support internal and external auditors.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: General Merchandise Retailers
• Education Level: Bachelor's degree