Security Risk and SOC Responsible

H&M Group•Secaucus, NJ

1d•Onsite

About The Position

As a Security Risk and SOC Responsible, your main focus will be to develop, implement, and maintain risk-based security and compliance strategies, connected to company policies, global standards, country legislation, and the sales market risk landscape. This on-site role reports into our Security Risk Manager and is based out of our New Jersey Support Office. Working at H&M means no two days are ever the same, but a typical day will include overseeing and leading the SOC team to ensure continuous monitoring and effective response to security incidents across H&M Group in the U.S. market, operating 24/7 and driving performance by providing feedback, recognition, and coaching. You will act as an ambassador towards the stores and area teams for the security department, services, standards, and requirements. You will support a flexible portfolio of locations (typically 50–70), with scope adjusted based on evolving business needs. You will develop and lead a resilient crisis management strategy and framework for the Sales Market to prepare for, respond to, and manage crises that could affect our people, reputation, and business operations. You will regularly review the threat landscape, assess their impact, and create/train crisis response plans. You will represent the Security function within the company’s Business Continuity framework and provide security expertise and support for special events such as high-profile company events, meetings, and designer events. You will work closely with policy owners (CoE/WB, H&S, Travel H&S, LP) and provide feedback on identified risks and gaps. You will oversee risk management and compliance processes in alignment with global and local standards, ensuring effective crisis, risk, and incident handling for all security service areas. You will set expectations and deliver on internal control activities, frameworks, investigations, and audit plans. You will conduct risk assessments and store security audits, ensuring compliance with internal policies. You will ensure accurate reporting of all audit and internal control outcomes through global tools and communicate findings to relevant stakeholders. You will regularly review results, identify and respond to compliance gaps or vulnerabilities and collaborate with relevant functions to establish corrective action plans, update procedures, and enhance guidelines. You will support and reinforce a strong health and safety culture across all areas of the business. You will plan policy awareness campaigns, support in implementing control measures, and deliver trainings (H&S, LP, CoE, etc.). You will monitor KPIs, analyze trends, and recommend actions. You will leverage technical knowledge of security systems to assess compliance with Green Security Standards. You will support the execution of loss prevention strategies to reduce shrinkage and participate in fraudulent investigations. You will serve as a key business partner to the SM Security Manager, fostering a high-performing culture within the team and sales market. You will promote a data and risk-based approach and culture within the team and across the sales market. You will coordinate stakeholders and plan activities for a successful Yearly Stock take process (including vendor and tech readiness, training sessions, and analysis steps). You will support crisis management and incident response in SOC, including monitoring, coordination, and communication for security events and investigations. You will conduct real-time monitoring of news, systems, and security tools to proactively identify and respond to risks. You will analyze data, identify trends, and drive continuous improvement through post-incident reviews and enhanced processes. You will collaborate with internal teams, law enforcement, and external partners to strengthen security operations and response. You will lead SOC operations, including training, staff scheduling, technology/vendor management, and overall effectiveness of the function. You will manage the end-to-end lifecycle of security work orders, from request intake and approval through completion and closeout. You will oversee invoice processing for security services, ensuring accuracy, proper documentation, and alignment with agreed scope and rates. You will track and reconcile work orders and invoices, identifying discrepancies, ensuring timely payments, and maintaining clear audit trails. You will support ad hoc security responsibilities, including inventory processes, investigations, store audits, or other related tasks.

Requirements

Bachelor’s degree in Security Management, Risk Management, Business Administration or related discipline.
Minimum of 3 years’ experience in a security, risk or compliance-related role.
Experience in retail, distribution or multi-site environments.
Strong understanding of auditing, compliance and risk assessment methodologies.
Familiarity with information security frameworks (e.g., PCI DSS) and loss prevention systems.
Analytical mindset with a continuous improvement approach.
Knowledge of security systems, audit tools, loss prevention and risk management techniques.
Proactive problem solver with strong organizational skills.
Effective communicator, capable of influencing and engaging across all levels of the business.
High ethical standards with a strong sense of accountability.
Fluent in English; other languages are an advantage.

Responsibilities

Oversee and lead the SOC team to ensure continuous monitoring and effective response to security incidents across H&M Group in the U.S. market, operating 24/7 and drive performance by providing feedback, recognition, and coaching.
Act as an ambassador towards the stores and area teams for the security department, services, standards and requirements.
Support a flexible portfolio of locations (typically 50–70), with scope adjusted based on evolving business needs.
Develop and lead a resilient crisis management strategy and framework for the Sales Market to prepare for, respond to, and manage crises that could affect our people, reputation, and business operations.
Regularly review threat landscape, assess their impact, and create/train crisis response plans.
Represent the Security function within company’s Business Continuity framework.
Provide security expertise and support for special events such as high-profile company events, meetings, and designer events.
Work closely with policy owners (CoE/WB, H&S, Travel H&S, LP) and provide feedback on identify risks and gaps.
Oversee risk management and compliance processes in alignment with global and local standards, ensuring effective crisis, risk, and incident handling for all security service areas.
Set expectations and deliver on internal control activities, frameworks, investigations and audit plans.
Conduct risk assessments and store security audits, ensuring compliance with internal policies.
Ensure accurate reporting of all audit and internal control outcomes through global tools and communicate findings to relevant stakeholders.
Regularly review results, identify and respond to compliance gaps or vulnerabilities and collaborate with relevant functions to establish corrective action plans, update procedures and enhance guidelines.
Support and reinforce a strong health and safety culture across all areas of the business.
Plan policy awareness campaigns, support in implementing control measures and deliver trainings (H&S, LP, CoE, etc.).
Monitor KPIs, analyze trends and recommend actions.
Leverage technical knowledge of security systems to assess compliance with Green Security Standards.
Support the execution of loss prevention strategies to reduce shrinkage.
Participate in fraudulent investigations.
Serve as a key business partner to the SM Security Manager, fostering a high-performing culture within the team and sales market.
Promote a data and risk-based approach and culture within the team and across the sales market.
Coordinate stakeholders and plan activities for a successful Yearly Stock take process (including vendor and tech readiness, training sessions and analysis steps).
Support crisis management and incident response in SOC, including monitoring, coordination, and communication for security events and investigations.
Conduct real-time monitoring of news, systems, and security tools to proactively identify and respond to risks.
Analyze data, identify trends, and drive continuous improvement through post-incident reviews and enhanced processes.
Collaborate with internal teams, law enforcement, and external partners to strengthen security operations and response.
Lead SOC operations, including training, staff scheduling, technology/vendor management, and overall effectiveness of the function.
Manage the end-to-end lifecycle of security work orders, from request intake and approval through completion and closeout.
Oversee invoice processing for security services, ensuring accuracy, proper documentation, and alignment with agreed scope and rates.
Track and reconcile work orders and invoices, identifying discrepancies, ensuring timely payments, and maintaining clear audit trails.
Support ad hoc security responsibilities, including inventory processes, investigations, store audits or other related tasks.