---

---

Location

Duluth, GA | United States

---

Job description

National DCP is a leading supply chain company dedicated to serving a national Quick Service Restaurant (QSR) clientele. We pride ourselves on delivering efficient and secure solutions to optimize our clients' supply chain operations. Headquartered in the bustling Atlanta Metro Area, we are seeking a highly skilled and experienced Senior Director of Information Security to lead our efforts in safeguarding critical information assets and ensuring the resilience of our digital infrastructure.

 

Location: Atlanta Metropolitan Area (Remote/Hybrid)

Compensation: Competitive Salary with bonus potential. (Weekly Pay)

 

The Senior Director of Information Security is responsible for establishing and maintaining corporate wide information security programs to ensure that information assets are protected across multiple locations. This position is responsible for identifying, evaluating, and reporting on security risks as well as owning and driving the enterprise-wide Cybersecurity program. This position requires a visionary leader with strong skills in technology, security, and risk management to foster a security forward culture.

The Senior Director of Information Security serves as the process owner of all ongoing activities related to the integrity and confidentiality of customers, business partners, employees, and business information, as well as compliance with the organization's information security policies. A key element of this role is working with executive management to determine acceptable levels of risk for the organization. He or she must be highly knowledgeable about the business environment and must ensure that information system controls are maintained in a fully functional, secure mode.

The ideal candidate is an integrator of people and processes, a thought leader, a problem solver and should possess solid domain competency in the field of information security by having 8 to 10 years of direct experience in this significant leadership role.

Strategic Leadership:

• Develop and execute a robust cybersecurity strategy aligned with business goals and industry best practices.
• Provide strategic guidance to senior management on cybersecurity risk management and mitigation.

Team Management:

• Manage the enterprise's security organization, consisting of direct reports and vendor relationships, including hiring, training, staff development, performance management and annual compensation review.

Risk Management:

• Identify, assess, and prioritize cybersecurity risks, and develop proactive measures to mitigate potential threats.
• Lead the organization through testing and execution of effective incident response procedures.

Incident Response and Investigation:

• Develop and implement incident response plans to effectively manage and mitigate cybersecurity incidents.
• This leader plays a critical role in making certain we are prepared to continue to function in the event of a Cybersecurity attack or a natural disaster.
• Conduct investigations into security incidents and breaches, providing detailed reports and recommendations for improvement.

Security Architecture and Metrics:

• Oversee the design and implementation of robust security architectures for our IT systems.
• Develop business-relevant metrics to measure the efficiency and effectiveness of the security programs, facilitate appropriate resource allocation and increase the maturity of these programs.

Compliance and Regulation:

• Ensure that security programs are in compliance with applicable laws, regulations, and policies to minimize or eliminate risk and audit findings

Training and Awareness:

• Develop and deliver cybersecurity training programs to educate employees on security best practices.

• Bachelor's or Master's degree in Cybersecurity, Information Technology, or a related field.
• Proven experience (min. 8 to 10 years) in a senior cybersecurity leadership role.
• Demonstrate knowledge of Crisis Management & Business Continuity.
• Demonstrated effectiveness in executive presentation and escalation management.
• Knowledge of security and control frameworks, such as ISO 27001/2, the NIST Cybersecurity Framework, CIS Top 20, CobiT, COSO and ITIL.
• Relevant certifications such as CISSP, CISM, or CISA are highly desirable.

 

---

Job tags

---

---

Salary