Sr. Director, IT Security

Carter's • Atlanta, GA

208d

About The Position

Carter's Inc. is the largest North American apparel retailer exclusively for babies and young children, encompassing Carter's, OshKosh B'gosh, Skip*Hop and Little Planet brands. This role is responsible for establishing, maintaining and overseeing the enterprise-wide vision, strategy, architecture, policies and programs to ensure information assets are protected, while managing the risks and challenges facing the company and the retail industry. The position will develop and implement information security initiatives, security frameworks, conduct and oversee security operations for the ongoing protection of the Carter's global environment, monitor and audit compliance with regulatory and internal standards, and lead investigations related to policy violations, security breaches, and computer crimes.

Requirements

• Proven experience in planning security strategy and IT security projects for a multi-billion organization.
• Strong knowledge of industry best practices, laws, frameworks, and compliance standards related to data privacy and protection.
• Experience in at least three of the following domains: application security, security technologies and products, security engineering, security analysis and investigations, risk assessment and management, disaster recovery, IT SOX auditing.
• In-depth knowledge of platform operating systems, including Windows, Linux, and Unix.
• Experience with Wide Area Network/Local Area Network/Wireless Network, TCP/IP and related protocols.
• Strong knowledge of Intrusion Detections and Prevention techniques.
• Proven experience leading committees or sub-committees related to security, compliance, privacy, or risk.
• Very strong written and verbal skills and executive presence.

Nice To Haves

• Prior successful experience as the Information Security leader in a multi-billion organization.
• Bachelor Degree and 10+ years' IT experience, with at least 5 years of leadership in information security.
• At least 3 years of direct hands-on experience or direct management of firewall administration, intrusion detection systems, and data encryption software.
• A Certified Information System Security Professional (CISSP) or equivalent certification.
• Prior work experience with MSSP vendor relationship.

Responsibilities

• Oversee the development, implementation, and maintenance of global security policy, enterprise security standards, guidelines and procedures for appropriate risk mitigation.
• Serve as an expert advisor to executive leadership, Board of Directors, and Audit Committee in the development and maintenance of a strong information privacy and security program.
• Develop policies and procedures to ensure physical safety of employees and visitors.
• Collaborate with Legal Counsel and Internal Audit on compliance, security, and privacy practices.
• Maintain relationships with local, state and federal law enforcement and other related government agencies.
• Be responsible for 24/7 security monitoring and threat detection/prevention for the organization.
• Develop and report on security operations dashboards, metrics and KPIs.
• Accountable to develop, implement, integrate, and maintain the security strategy and roadmap.
• Investigate security breaches and communicate to appropriate executive management.
• Conduct periodic penetration testing and security audits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Clothing, Clothing Accessories, Shoe, and Jewelry Retailers
• Education Level: Bachelor's degree