Job Information
Lowe's Sr Director, Information Security- GRC in Charlotte, North Carolina
The primary purpose of this role is to serve as a senior leader within the Lowe's Information Security team. This includes responsibility for developing and executing strategies and plans for the global enterprise cyber security program. This role leads the implementation of major programs in support of large, complex initiatives that enable key business and technology strategies and programs with enterprise impact. This role oversees all activities including planning, strategy, architecture, program execution, engineering and service operations for Identity and Access Management, Security engineering and operations, vulnerability management, policies, standards and risk management. In addition, this role provides critical input into the long-term strategy for technology security across all domains and platforms. The individual in this role provides direction and people leadership to multiple teams while overseeing department level budgets, planning, and forecasting.
Key Responsibilities:
• Works closely with the Chief Information Security Officer (CISO), IT, and Business Executives, to create and manage the Risk Management Program of Lowe’s. This includes processes to identify, manage and report risk in a clear and quantitative format. budgets and services that directly enable business and technology goals
• Develops and uses predictive analytics to better predict risks to the company and equip other teams within the group to create appropriate countermeasures, either by way of process, governance, or technology.
• Establishes an Information Security controls framework that defines the risk vision for the company and how the effectiveness of the security Program will be measured in relation to established standards.
• Provides expertise and guides the administration of security tools to ensure they are addressing the governance, risk, and compliance aspects.
• Creates and maintains a solid security awareness Program which ensures Lowe’s associates are well educated in common cyber security best practices and are equipped to safeguard the information assets of the company.
• Creates and maintains a compliance function that partners with stakeholders to ensure they understand and are successful in establishing processes, technologies or governance structures that will create systems that are compliant to external regulations such as SOX, PCI, etc. as well as internal controls established by the GRC group.
Qualifications
Minimum Qualifications
• Bachelor's Degree in Computer Science, CIS, Engineering, Business Administration, Cybersecurity, or related field (or equivalent work or military experience in a related field)
• 12 years of experience in combination of risk management, security, compliance and Information Technology
• 7 years of leadership experience with direct reports
• 8 years of experience with information security tools, concepts and practices
• Familiarity with multi-platform technology environments and their operational/security considerations
• Strong project management skills, with experience in managing resources to meet goals on simultaneous/multiple projects
Preferred Qualifications
• Master’s Degree in Computer Science, CIS, Engineering, Business Administration, Cybersecurity, or related field
• IT experience in the retail industry
• Relevant information security certifications (e.g., CISSP, CISM, CEH, PCI ISA, CRISC, CISA, OSCP, GPen)
• Experience in a PCI/Retail technology environment
• 5 years of senior management experience
• Experience managing in an Agile environment
• Experience leading global teams
• Experience with process management methodologies such as Six Sigma or ITIL Delivery methodologies (Agile, Scrum, SAFe)
• Broad knowledge of infrastructure (network and servers), network architecture, services and security policies
About Lowe’s
Lowe’s Companies, Inc. (NYSE: LOW) is a FORTUNE® 50 home improvement company serving approximately 16 million customer transactions a week in the United States. With total fiscal year 2023 sales of more than $86 billion, Lowe’s operates over 1,700 home improvement stores and employs approximately 300,000 associates. Based in Mooresville, N.C., Lowe’s supports the communities it serves through programs focused on creating safe, affordable housing and helping to develop the next generation of skilled trade experts. For more information, visit Lowes.com .
Lowe’s is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.
Pay Range: $179,000.00 - $340,100.00 annually Starting rate of pay may vary based on factors including, but not limited to, position offered, location, education, training, and/or experience. For information regarding our benefit programs and eligibility, please visit https://talent.lowes.com/us/en/benefits.
Lowe's
-
- Lowe's Jobs