Business Information Security Lead
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Business Information Security Lead securing US Foods’ digital foodservice technology ecosystem. Managing cybersecurity risks, compliance, assessments, and remediation across DigiTech value streams.
Responsibilities:
- Consult on key business initiatives, ensuring end-to-end identification and risk management
- Execute the security program with Value Stream partners by identifying and remediating risks according to security policies and standards
- Understand business requirements and provide security expertise for decision-making and roadmaps
- Explain the business need for security and potential regulatory or cyber-attack impacts
- Act as the single security point of contact for the Value Stream and provide escalation for significant concerns
- Perform audits, assess risks, and manage or enforce remediation of issues from security assessments, penetration tests, and internal discovery
- Provide security compliance visibility through metrics, benchmarking, and vulnerability guidance
- Present monthly prioritized gap analyses, remediation plans, and successes to the Value Stream Lead
- Coach Product Teams on the maturity and use of security tools and information
- Articulate impacts to Value Stream partners during strategy and roadmap discussions with the Information and Cyber Security Team
- Collaborate with internal teams, auditors, vendors, managed security services, and professional services providers
- Travel as needed for business
Requirements:
- At least 5+ years of information security experience
- Broad foundational knowledge across information and cybersecurity domains, especially security risk management and application security
- Familiarity with PCI, HIPAA, SOX, NIST CSF, ISO 27001, CIS, and similar frameworks
- Experience building positive relationships across multiple business areas
- Ability to work independently and make policy-aligned decisions
- Experience measuring and tracking cybersecurity risks, issues, and exceptions
- Ability to present complex security topics to varied audiences, including senior technical leaders
- Ability to advise, collaborate, and work in a team environment
- Ability to influence without authority
- Experience executing security compliance plans, vulnerability management programs, risk management lifecycles, and/or security assessment/governance processes
- Bachelor’s degree from an accredited college/university or equivalent professional experience required
- Experience developing, measuring, and tracking key performance metrics, preferably in cybersecurity
- Highly organized, efficient, and detail-oriented
- Track record of developing resources, mentoring, and providing career guidance
- Strong written and verbal communication skills
- Proactive self-development and awareness of evolving threats, security trends, best practices, and regulatory requirements
- Preferred but not required: SANS GSEC, GCIA or related certification, CISSP
Benefits:
- Annual incentive plan bonus may apply
- Health insurance
- Pre-tax spending accounts
- Retirement benefits
- Paid time off
- Short-term disability
- Long-term disability
- Employee stock purchase plan
- Life insurance
- Remote work arrangement
Similar Jobs
Senior Security Engineer
Senior Security Engineer enhancing cybersecurity capabilities across multiple domains for EverCommerce. Collaborating with various teams to improve security posture in a growing environment.
Senior Consultant – Cloud Red Team, Blue Team
Sr. Consultant performing cloud-focused adversary emulation techniques. Collaborating with clients to validate security defenses and improve cloud security measures.
Senior Security Research Engineer
Joining Picus as a Senior Security Research Engineer, focusing on technical content in cybersecurity. Engage in deep research, shaping the market's understanding of exposure validation.
Principal Network Security Engineer
Principal Network Security Engineer leading design and architecture of Autodesk's global network security infrastructure. Collaborating with IT to enhance security posture across cloud and hybrid networks.
Senior Copywriter, B2B SaaS, Cybersecurity
Senior Copywriter responsible for content creation for B2B SaaS and Cybersecurity. Requires understanding diverse client needs and producing tailored communication.
Relief Security Officer
Relief Security Officer providing security services across multiple sites in the UK. Ensuring safety while delivering a high standard of customer service with ongoing training and development opportunities.
Security Architect
Security Architect responsible for delivering quality security solutions and technical support. Collaborating with teams across the company to analyze and implement security measures, based in Poland.
Cloud Security Consultant
Cloud Security Consultant with expertise in securing AWS and Azure environments for international clients. Collaborate with internal teams to enhance cloud architecture and security processes.
Corporate Security Engineer
Corporate Security Engineer managing and advancing Microsoft 365 security across various platforms for a SaaS company. Owning security infrastructure and resolving complex IT support issues.
Senior Manager, IT Operations, Cybersecurity, Compliance
Senior Manager of IT Operations overseeing Microsoft cloud administration and cybersecurity at Cristcot. Manage operations, vendor relations, and ensure compliance in IT environment.
IT Security Systems Administrator
Senior IT Security System Administrator at TopDog Law overseeing IT systems and security operations. Leading migration and compliance activities in a fully remote environment.
Cyber Security Strategy Lead
Cybersecurity Strategy Lead at Riveron, guiding cybersecurity engagements and fostering client relationships through expert advisory services.
Technical Customer Success Manager – Cyber Security
Technical Customer Success Manager at Armis securing maximum value realization for customers from the Armis platform through implementation and support. Collaborating with various teams to enhance customer experiences and drive success.
Commercial Account Executive
Commercial Account Executive focusing on sales strategies and client relations in the Nordics region for Upwind Security's cloud security solutions.
Mainframe Security Architect, RACF Architect Consultant
Mainframe security architect / RACF Architect Consultant primarily working on enterprise RACF and USS security solutions. Leading architecture, design, and deployment of security project solutions while collaborating with various teams.
Senior SAP Security Consultant – Bilingual, English & Spanish
SAP Security Consultant responsible for security in SAP environments across North and Latin America. Engaging in strategic projects and international client interaction.
Cybersecurity Specialist – IAM, Vulnerability Management
Cybersecurity Specialist providing operational support in identity and access management and vulnerability management. Role entails tracking approvals and compliance in a remote workspace.
Security Systems Technical Writer
Associate Manager driving knowledge and technical enablement in documentation for Security Systems. Involves optimization of training and support materials for technical teams.