Sr Manager, Information Security - Risk

Lowe's Companies, Inc.

107d

About The Position

We are seeking a Senior Manager – Risk to lead a team of professionals dedicated to identifying, monitoring, and mitigating information security risks across the enterprise. In this role, you will serve as a strategic advisor and escalation point for complex cybersecurity challenges, ensuring that Lowe’s risk posture remains resilient in a rapidly evolving threat landscape. The ideal candidate brings broad expertise in risk management, information security, and compliance—paired with the ability to influence executives, mentor global teams, and drive the maturity of the enterprise security risk program. You will help embed risk-aware decision-making into business strategies, aligning security priorities with organizational goals.

Requirements

• Bachelor’s degree in Computer Science, CIS, Engineering, Business Administration, Cybersecurity, or related field (or equivalent work/military experience)
• 8+ years of IT experience with broad exposure across planning, analysis, and application development
• 4+ years of experience with information security tools, concepts, and practices
• 3+ years of leadership experience managing projects or teams, with proven ability to provide technical direction, thought leadership, and mentorship
• Familiarity with multi-platform environments and associated security considerations
• Strong project management experience, including leading multiple concurrent initiatives
• Advanced analytical and reporting skills, with the ability to reconcile data and provide insights to executives
• Experience in developing and operationalizing risk frameworks, applying risk methodologies (including for emerging risks such as AI-infused systems), and leveraging GRC tools to build scalable processes.

Nice To Haves

• Master’s degree in Computer Science, CIS, Engineering, Business Administration, or Cybersecurity.
• Professional certifications such as: CISSP – Certified Information Systems Security Professional, CISM – Certified Information Security Manager, CISA – Certified Information Systems Auditor, CRISC – Certified in Risk and Information Systems Control, PCI ISA, CEH, OSCP, GPEN, or other relevant certifications
• Experience in retail technology ecosystems, including PCI and SOX regulatory scope.
• Experience conducting or leading PCI-DSS assessments.
• Background in infrastructure (network, servers), network architecture, and security policies.
• Proven experience leading global teams and transformation initiatives.

Responsibilities

• Serve as an escalation point for complex security issues, ensuring risks are effectively managed or elevated to senior leadership when necessary.
• Lead and mentor global teams (U.S. and India), fostering a culture of accountability, collaboration, and professional development.
• Oversee the identification, monitoring, and reporting of security risks, ensuring alignment with industry trends, regulatory requirements, and business objectives.
• Drive cybersecurity engagement across the enterprise, embedding security best practices into strategic initiatives and technology deployments.
• Provide expert guidance on security policies, standards, and procedures, ensuring compliance with regulatory and operational risk requirements.
• Lead or contribute to risk assessments, coverage plans, and monitoring activities, delivering clear, actionable reporting to stakeholders.
• Partner with technical teams to identify, resolve, and mitigate risk findings in a way that balances agility with protection.
• Build and maintain dashboards and executive-level reports, delivering meaningful insights on security posture, compliance, and remediation efforts.
• Ensure metrics are in place to measure risk, control effectiveness, and breach remediation, using results to evolve strategy and governance.
• Guide the implementation of enterprise-wide security programs, ensuring strong governance, audit readiness, and operational excellence.
• Communicate a clear vision and strategy for the function, ensuring alignment across cross-functional partners and stakeholders.
• Operationalize a comprehensive risk framework, including risk methodology to assess both traditional and emerging risks (e.g., AI-infused systems), and build supporting processes within the GRC tool to ensure consistency, scalability, and governance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees