Manager, Enterprise Security

Portillo's • Oak Brook, IL

4d • $130,000 - $155,000 • Hybrid

About The Position

The Manager, Enterprise Security develops and executes Portillo’s enterprise cybersecurity strategy, ensuring security capabilities evolve with business priorities, technology modernization, and the company’s risk profile. The role defines the long-term security vision, strengthens governance, sets architecture direction, evaluates emerging threats, and recommends vendors, technologies, and capabilities needed to protect the business.

The position balances long-term planning with immediate business needs and a changing technology and threat landscape, including AI. It works across the organization to integrate security into the design, implementation, and ongoing operation of systems, applications, data, integrations, and digital capabilities across current and future enterprise platforms. The role is based at Portillo’s Restaurant Support Center in Oakbrook, Illinois, with on-site presence required Monday through Thursday and flexibility to work remotely on Fridays. Occasional travel to restaurants, support locations, vendor sites, or business meetings may be required.

The position reports to the Chief Information Officer and partners with business and technology leaders, enterprise application owners, external security vendors, managed service providers, auditors, consultants, and other strategic partners. Compensation is $130,000–$155,000 per year, depending on experience, location, and additional skills. The role is eligible to participate in a discretionary bonus program based on company and individual performance.

Requirements

• At least 8 years of progressive experience in cybersecurity, enterprise technology, infrastructure, cloud, application security, risk management, or related disciplines.
• Demonstrated experience developing cybersecurity strategies, roadmaps, governance frameworks, standards, and investment recommendations.
• Working knowledge of Microsoft security and compliance technologies, identity and access management, cloud and SaaS security, endpoint security, data protection, vulnerability management, incident response, and cyber resilience.
• Experience evaluating security risks and control requirements for enterprise platforms such as Oracle ERP, Workday, Microsoft 365, Azure, data platforms, integrations, and AI-enabled solutions.
• Experience selecting and managing security vendors, managed service providers, consultants, and technology partners, including holding them accountable for performance and results.
• Ability to translate complex technical risks into clear business implications and actionable recommendations for executive and non-technical audiences.
• Strong strategic thinking, judgment, influence, communication, collaboration, and prioritization skills.
• Ability to operate as the senior-most security leader while remaining practical, hands-on, and focused on enabling the business.

Nice To Haves

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related discipline preferred.
• Relevant security certifications such as CISSP, CISM, CCSP, GIAC, or comparable credentials preferred.
• Familiarity with security, privacy, payment-card, financial-control, and risk-management frameworks applicable to a multi-location restaurant organization preferred.

Responsibilities

• Develop and maintain a multi-year enterprise cybersecurity strategy, roadmap, and budget aligned with business strategy, growth priorities, technology roadmap, and risk tolerance.
• Monitor the threat landscape, including emerging AI-enabled threats, and translate findings into practical security priorities and actions.
• Establish measurable security objectives and key risk and performance indicators, and communicate recommendations, gaps, and progress to leadership.
• Balance long-term security architecture and capability planning with near-term operational needs and business realities.
• Align security planning and execution with initiatives supporting restaurant sales, catering growth, grand openings, and experiential initiatives.
• Coordinate with business functions and external partners to integrate security requirements into business initiatives, and facilitate cross-functional communication and execution.
• Define enterprise security principles, standards, and architecture requirements for infrastructure, cloud services, business applications, data platforms, and integrations.
• Partner with technology and business leaders to embed security requirements into system and application selection, design, implementation, and operation.
• Provide security direction for the Microsoft ecosystem, Oracle ERP, Workday, and other current and future enterprise platforms.
• Ensure significant technology initiatives receive appropriate security and risk reviews before implementation or major changes.
• Develop security standards and governance practices for generative AI, intelligent agents, automation, machine learning, and other emerging technologies.
• Assess AI risks, including sensitive-data exposure, unauthorized tools, identity and access misuse, insecure integrations, model or agent manipulation, and evolving threat-actor capabilities.
• Partner with business, data, legal, privacy, and technology stakeholders to enable responsible innovation while protecting company, team member, and guest information.
• Establish and maintain enterprise security policies, standards, control expectations, and governance processes.
• Lead and coordinate security risk assessments for new systems, applications, vendors, integrations, and major business initiatives.
• Guide prioritization and remediation of security risks and control gaps, establishing clear ownership and accountability.
• Partner with internal stakeholders and external resources on audits, compliance requirements, privacy obligations, and cyber-insurance expectations.
• Define strategy for identity security, role-based and privileged access, least privilege, access reviews, and administrative account governance.
• Partner with application and business owners to strengthen access models and security controls across enterprise platforms.
• Provide strategic direction for protecting sensitive information across Microsoft 365, cloud services, enterprise applications, endpoints, and data platforms.
• Provide strategic oversight for security monitoring, threat detection, vulnerability management, incident response, recovery readiness, and cyber resilience.
• Ensure incident response plans, escalation paths, decision-making authority, and response partners are defined, maintained, and exercised.
• Build partnerships across Information Technology, Data, Digital, Operations, Finance, Human Resources, Marketing, Legal, and other business functions.
• Support security awareness training, shared accountability, and risk-informed decision-making across the organization.
• Provide direction and subject-matter leadership to internal team members, service providers, and project teams involved in security-related work.
• Perform other duties as assigned.

Benefits

• Participation in a discretionary bonus program based on company and individual performance.
• Monthly technology reimbursement.
• Quarterly Portillo’s gift cards.
• Medical, dental, and vision insurance.
• Paid time off.
• Life insurance.
• 401(k) plan with company match.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager