Manager, Enterprise Security

Portillo’s • Oak Brook, IL

2d • Hybrid

About The Position

The Manager, Enterprise Security develops and executes Portillo’s enterprise cybersecurity strategy, ensuring security capabilities evolve with business priorities, technology modernization, and the company’s risk profile. The position defines the long-term security vision, strengthens governance, establishes architecture direction, evaluates emerging threats, and recommends vendors, technologies, and capabilities needed to protect the business. It balances long-term planning with immediate business needs and a rapidly changing technology and threat landscape, including AI.

The role partners across the organization to integrate security into the design, implementation, and ongoing operation of Portillo’s systems, applications, data, integrations, and digital capabilities across current and future enterprise platforms. It is based at the Portillo’s Restaurant Support Center in Oakbrook, Illinois, with on-site presence required Monday through Thursday and flexibility to work remotely on Fridays. Occasional travel to restaurants, support locations, vendor sites, or business meetings may be required.

The position reports to the Chief Information Officer and works closely with technology and business leaders, internal teams, service providers, auditors, consultants, and strategic partners. The role provides strategic direction and subject-matter leadership while remaining practical, hands-on, and focused on enabling the business.

Requirements

• 8+ years of progressive experience in cybersecurity, enterprise technology, infrastructure, cloud, application security, risk management, or related disciplines.
• Demonstrated experience developing cybersecurity strategies, roadmaps, governance frameworks, standards, and investment recommendations.
• Working knowledge of Microsoft security and compliance technologies, identity and access management, cloud and SaaS security, endpoint security, data protection, vulnerability management, incident response, and cyber resilience.
• Experience evaluating security risks and control requirements for enterprise platforms such as Oracle ERP, Workday, Microsoft 365, Azure, data platforms, integrations, and AI-enabled solutions.
• Experience selecting and managing security vendors, managed service providers, consultants, and technology partners, including holding them accountable for performance and results.
• Ability to translate complex technical risks into clear business implications and actionable recommendations for executive and non-technical audiences.
• Strong strategic thinking, judgment, influence, communication, collaboration, and prioritization skills.
• Ability to operate as the senior-most security leader while remaining practical, hands-on, and focused on enabling the business.
• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related discipline preferred.
• Relevant security certifications such as CISSP, CISM, CCSP, GIAC, or comparable credentials are preferred.
• Occasional travel to Portillo’s restaurants, support locations, vendor sites, or business meetings may be required.

Nice To Haves

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related discipline.
• Security certifications such as CISSP, CISM, CCSP, GIAC, or comparable credentials.
• Familiarity with security, privacy, payment-card, financial-control, and risk-management frameworks applicable to a multi-location restaurant organization.

Responsibilities

• Develop and maintain a multi-year enterprise cybersecurity strategy, roadmap, and budget aligned with business strategy, growth priorities, technology roadmap, and risk tolerance.
• Monitor the threat landscape, including emerging AI-enabled threats, and translate findings into practical security priorities and actions.
• Establish measurable security objectives and key risk and performance indicators, and communicate recommendations, gaps, and progress to leadership.
• Balance long-term security architecture and capability planning with near-term operational needs and business realities.
• Align security planning and execution with initiatives supporting restaurant sales, catering growth, grand openings, and experiential initiatives.
• Coordinate with Operations, Finance, Legal, Supply Chain, Risk, IT, Loyalty, Creative, and external partners to integrate security requirements into business initiatives.
• Facilitate cross-functional communication and alignment to support efficient and consistent execution of security priorities.
• Define enterprise security principles, standards, and architecture requirements for infrastructure, cloud services, business applications, data platforms, and integrations.
• Partner with technology and business leaders to embed security requirements into system and application selection, design, implementation, and ongoing operation.
• Provide security direction for the Microsoft ecosystem, Oracle ERP, Workday, and other current and future enterprise platforms.
• Ensure significant technology initiatives receive appropriate security and risk reviews before implementation or major changes.
• Develop security standards and governance practices for generative AI, intelligent agents, automation, machine learning, and other emerging technologies.
• Assess AI risks, including sensitive-data exposure, unauthorized tools, identity and access misuse, insecure integrations, model or agent manipulation, and evolving threat-actor capabilities.
• Partner with business, data, legal, privacy, and technology stakeholders to enable responsible innovation while protecting company, team member, and guest information.
• Establish and maintain enterprise security policies, standards, control expectations, and governance processes.
• Lead and coordinate security risk assessments for new systems, applications, vendors, integrations, and major business initiatives.
• Guide prioritization and remediation of identified security risks and control gaps, establishing clear ownership and accountability.
• Partner with internal stakeholders and external resources to support audits, compliance requirements, privacy obligations, and cyber-insurance expectations.
• Define the strategy for identity security, role-based access, privileged access, least privilege, access reviews, and administrative account governance.
• Partner with application and business owners to strengthen access models and security controls across enterprise platforms.
• Provide strategic direction for protecting sensitive information across Microsoft 365, cloud services, enterprise applications, endpoints, and data platforms.
• Provide strategic oversight for security monitoring, threat detection, vulnerability management, incident response, recovery readiness, and cyber resilience.
• Ensure incident response plans, escalation paths, decision-making authority, and response partners are clearly defined, maintained, and exercised.
• Build strong partnerships across Information Technology, Data, Digital, Operations, Finance, Human Resources, Marketing, Legal, and other business functions.
• Support security awareness training, shared accountability, and risk-informed decision-making across the organization.
• Provide direction and subject-matter leadership to internal team members, service providers, and project teams involved in security-related work.
• Perform other duties as assigned.

Benefits

• Participation in a discretionary bonus program based on company and individual performance.
• Monthly technology reimbursement.
• Quarterly Portillo’s gift cards.
• Medical insurance.
• Dental insurance.
• Vision insurance.
• Paid time off.
• Life insurance.
• 401(k) plan with a company match.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager