Business Information Security Lead

Emploi pas sur LinkedIn

🕒 il y a 1 jour

🐻 Alaska, Illinois, +3 états de plus – Distant

🐻 Alaska – Remote 🌽 Illinois – Remote 🌲 North Carolina – Remote ❄️ Minnesota – Remote 🤠 Texas – Remote

💵 $100 000 - $155 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

US Foods

Site WebLinkedInTous les Emplois

10 000+ employés

📦 Logistique

🍽️ Alimentation et boissons

🛍️ eCommerce

Logistics • Food & Beverage • eCommerce

US Foods est l'un des plus grands distributeurs de services alimentaires aux États-Unis, offrant une vaste gamme de produits, d'équipements culinaires et de services de soutien pour les entreprises de restauration. Ils se concentrent sur l'innovation produit, la durabilité et le partenariat client, en fournissant des outils et des ressources pour aider les clients à améliorer leurs opérations et à répondre à des préférences alimentaires diverses. Avec un engagement envers la qualité, la sécurité et l'engagement communautaire, US Foods vise à avoir un impact positif à la fois sur les clients et l'environnement.

Description

• Support the Digital and Technology (DigiTech) value stream in delivering initiatives • Guide the value stream to ensure security policies and best practices are met • Assess and validate the security program assurance • Monitor progress and enforce resolution of outstanding security issues • Consult on key business initiatives, identifying and managing risks end-to-end • Execute the security program with Value Stream partners by identifying and remediating risks • Provide security expertise for business decision-making and road mapping • Explain security needs and potential regulatory or cyber-attack impacts to business partners • Serve as the security single point of contact and escalation path • Perform audits, assess risks, and manage remediation from security assessments, penetration tests, and internal discovery • Report security compliance status through metrics and vulnerability guidance • Present monthly prioritized gap analysis, remediation plans, and successes to the Value Stream Lead • Coach Product Teams on security tools and information • Articulate security impacts in strategy and roadmap discussions • Collaborate with internal teams, auditors, vendors, and managed security services providers

🎯 Exigences

• At least 5+ years of information security experience • Broad foundational knowledge across information and cybersecurity domains, especially security risk management and application security • Familiarity with PCI, HIPAA, SOX, NIST CSF, ISO 27001, and CIS • Experience building positive working relationships across multiple business areas • Ability to work independently and make policy-aligned decisions • Experience measuring and tracking cybersecurity risks, issues, and exceptions • Ability to present complex security topics to varied audiences, including senior technical leaders • Ability to advise, collaborate, and work in a team environment • Ability to influence without authority • Experience executing security compliance plans, vulnerability management programs, risk management lifecycles, and/or security assessment/governance processes • Bachelor’s degree from an accredited college/university or equivalent professional experience required • Experience developing, measuring, and tracking key performance metrics, preferably in a cybersecurity program • Highly organized, efficient, and detail-oriented • Track record of developing resources, mentoring, and providing career guidance • Strong written and verbal communication skills • Proactive self-development and awareness of evolving threats, security trends, best practices, and regulatory requirements • SANS GSEC, GCIA or related certification, or CISSP preferred but not required

🏖️ Avantages

• Annual incentive plan bonus • Health insurance • Pre-tax spending accounts • Retirement benefits • Paid time off • Short-term disability • Long-term disability • Employee stock purchase plan • Life insurance • Remote work • Travel as needed for business