Director, Information Security & Compliance

Caleres; Clayton (MO); On-site; USD 190,000 - 290,000; Full time

Job summary

Caleres is seeking an analytical security leader to design and drive the company’s cybersecurity vision, strategy, and programs. You will manage risk, governance, and security architecture across cloud, applications, infrastructure and data, while coordinating with Legal, Audit, HR and business stakeholders.

You will lead incident response, cyber resilience and third-party risk management, with a focus on SOX and PCI regulatory obligations and executive communication of security posture and

Qualifications

• Bachelor’s degree in Information Systems or related field.
• CISSP, CISM, CRISC or related professional certification preferred.
• 10+ years of progressive cybersecurity experience, including director-level leadership.
• Experience leading programs built on NIST CSF, CIS or similar frameworks.
• Strong understanding of enterprise security operations, cloud security, vulnerability management, SIEM, and GRC.
• Experience with Incident Response and tabletop exercises.
• Ability to translate security risk into executive-level presentations.

Responsibilities

• Lead Caleres’ information security program, strategy and roadmap with risk reduction focus.
• Provide executive reporting on security posture, risks, and investments.
• Establish security architecture across cloud, applications, infrastructure, identity and data; ensure compliance.
• Oversee incident response, disaster recovery and cyber resilience program.
• Manage third-party security risk and vendor relationships with cross-functional partners.
• Direct vulnerability management and remediation reporting; govern IAM and data protection governance.

Skills

Security leadership

Risk management

NIST CSF/CIS frameworks

Executive communication

Education

Bachelor's degree in Information Systems

CISSP certification (preferred)

Tools

SAP GRC

SailPoint

EDR/Cloud security

Job description

We seek an analytical leader passionate about designing innovative security solutions to join our IT team. In this critical leadership role, you’ll establish and oversee our company’s cybersecurity vision, strategy, architecture and programs to effectively manage risk for our business.

We are Caleres, a global footwear company with brands that fit people’s lives. We are ferocious about fit and living our mission of inspiring people to feel great…feet first.

We seek people who:

• Lead Caleres’ information security program, strategy and roadmap, including policies, capabilities, budget, investments, vendors and resources aligned with business priorities and risk reduction
• Lead enterprise cybersecurity risk management and provide executive leadership with clear reporting on security posture, material risks, emerging threats, performance measures, investment priorities and mitigation plans
• Establish security architecture, control standards and secure design requirements across cloud, applications, infrastructure, identity and data while leading regulatory, policy, audit and compliance activities, including SOX and PCI
• Lead managed detection, incident response and cyber resilience, including provider oversight, incident command, escalation, communications, business continuity, disaster recovery, backup protection and recovery testing
• Oversee third-party security risk and vendor relationships, partnering with Legal, Internal Audit, Human Resources and business stakeholders on regulatory obligations, remediation and risk decisions
• Direct vulnerability management, establishing remediation SLAs and providing clear risk and performance reporting
• Provide governance and role oversight for identity and access management, including SAP GRC and SailPoint
• Lead data protection governance, including data security posture management, data loss prevention, privacy-aligned controls and response to data-related incidents across cloud, collaboration, endpoint and enterprise platforms
• Participate in artificial intelligence and emerging technology governance by assessing security, privacy, third-party and data risks and helping define safeguards for responsible adoption
• Build a high-performing security organization and culture through talent development, succession planning, internal partnerships, security awareness and effective oversight of managed providers

We seek people with these qualifications:

• Ba chelor’s degree in Information Systems or related field
• CISSP, CISM, CRISC or related professional certification preferred
• 10+ years of progressive cybersecurity experience, including prior director-level or enterprise leadership and responsibility for leading high-performing technical teams.
• Experience leading and maturing cybersecurity programs built on NIST CSF, CIS or similar frameworks.
• Strong understanding of enterprise cybersecurity operations, EDR, network and cloud security, vulnerability management, security architecture, identity governance, SIEM, DSPM, and GRC.
• Experience with Incident Response; leading IR activities, managing IR plan, organizing/conducting annual tabletop exercises.
• Strong communication and organizational skills, with the ability to translate security risk into concise executive-level presentations and decision-ready materials
• Collaborative, solutions-driven and committed to continuous learning about emerging cybersecurity trends and technologies