Director, Information Security & Compliance

Caleres, Inc.; St. Louis (MO); On-site; USD 150,000 - 230,000; Full time

Job summary

Caleres, Inc. is seeking an analytical and strategic Chief Information Security Officer to lead the company’s cybersecurity vision, strategy and programs.

You will align security with business priorities, oversee risk management, architecture, and regulatory compliance to protect global brand assets. The role demands extensive leadership experience, deep technical knowledge of modern security controls, and a track record of building secure, resilient organizations across cloud, on-premises, and

Qualifications

• Bachelor’s degree in Information Systems or related field.
• CISSP, CISM, CRISC or related professional certification preferred.
• 10+ years of progressive cybersecurity experience, including prior director-level or enterprise leadership.
• Experience leading and maturing cybersecurity programs built on NIST CSF, CIS or similar frameworks.
• Strong understanding of enterprise cybersecurity operations, EDR, network and cloud security, vulnerability management, security architecture, identity governance, SIEM, DSPM, and GRC.
• Experience with Incident Response; leading IR activities, managing IR plan, and tabletop exercises.
• Strong communication and organizational skills, with the ability to translate security risk into concise executive-level presentations and decision-ready materials.
• Collaborative, solutions-driven and committed to continuous learning about emerging cybersecurity trends and technologies.

Responsibilities

• Lead Caleres’ information security program, strategy and roadmap.
• Provide executive reporting on security posture, material risks, emerging threats and mitigation plans.
• Establish security architecture across cloud, applications, infrastructure, identity and data.
• Lead managed detection, incident response and cyber resilience activities.
• Oversee third-party security risk and vendor relationships with stakeholders.
• Direct vulnerability management and remediation reporting with SLAs.
• Govern identity and access management, including SAP GRC and SailPoint.
• Lead data protection governance and privacy-aligned controls across platforms.
• Participate in AI governance to assess security and data risks for responsible adoption.
• Build a high-performing security organization and culture.

Skills

Security leadership

NIST CSF

Cloud security

Vulnerability management

EDR

GRC

Executive communication

Education

Bachelor’s degree in Information Systems or related field

Tools

SAP GRC

SailPoint

Job description

Founded in 1878, Caleres, originally known as Brown Shoe Company, is a global footwear company comprised of some of the world’s most loved brands including Famous Footwear, Sam Edelman, Naturalizer, Dr. Scholl's, and Allen Edmonds and many more. Caleres' legacy includes 145+ years of craftsmanship, a passion for fit with a mission to inspire people to feel great…feet first.We seek an analytical leader passionate about designing innovative security solutions to join our IT team. In this critical leadership role, you’ll establish and oversee our company’s cybersecurity vision, strategy, architecture and programs to effectively manage risk for our business.

We are Caleres, a global footwear company with brands that fit people’s lives. We are ferocious about fit and living our mission of inspiring people to feel great…feet first.

We Seek People Who

• Lead Caleres’ information security program, strategy and roadmap, including policies, capabilities, budget, investments, vendors and resources aligned with business priorities and risk reduction
• Lead enterprise cybersecurity risk management and provide executive leadership with clear reporting on security posture, material risks, emerging threats, performance measures, investment priorities and mitigation plans
• Establish security architecture, control standards and secure design requirements across cloud, applications, infrastructure, identity and data while leading regulatory, policy, audit and compliance activities, including SOX and PCI
• Lead managed detection, incident response and cyber resilience, including provider oversight, incident command, escalation, communications, business continuity, disaster recovery, backup protection and recovery testing
• Oversee third-party security risk and vendor relationships, partnering with Legal, Internal Audit, Human Resources and business stakeholders on regulatory obligations, remediation and risk decisions
• Direct vulnerability management, establishing remediation SLAs and providing clear risk and performance reporting
• Provide governance and role oversight for identity and access management, including SAP GRC and SailPoint
• Lead data protection governance, including data security posture management, data loss prevention, privacy-aligned controls and response to data-related incidents across cloud, collaboration, endpoint and enterprise platforms
• Participate in artificial intelligence and emerging technology governance by assessing security, privacy, third-party and data risks and helping define safeguards for responsible adoption
• Build a high-performing security organization and culture through talent development, succession planning, internal partnerships, security awareness and effective oversight of managed providers

We Seek People With These Qualifications

• Bachelor’s degree in Information Systems or related field
• CISSP, CISM, CRISC or related professional certification preferred
• 10+ years of progressive cybersecurity experience, including prior director-level or enterprise leadership and responsibility for leading high-performing technical teams.
• Experience leading and maturing cybersecurity programs built on NIST CSF, CIS or similar frameworks.
• Strong understanding of enterprise cybersecurity operations, EDR, network and cloud security, vulnerability management, security architecture, identity governance, SIEM, DSPM, and GRC.
• Experience with Incident Response; leading IR activities, managing IR plan, organizing/conducting annual tabletop exercises.
• Strong communication and organizational skills, with the ability to translate security risk into concise executive-level presentations and decision-ready materials
• Collaborative, solutions-driven and committed to continuous learning about emerging cybersecurity trends and technologies

Caleres is an Equal Opportunity Employer by choice. We believe our company should be as diverse as the consumers we serve. We seek and engage talented individuals from all backgrounds, ethnicities, genders, lifestyles, and belief systems.

Caleres is invested in our Associates. We regularly review our pay matrices and update appropriately based on need. Starting pay is determined by several factors, including relevant skills, qualifications, and experience. The actual pay will equal or exceed the required minimum wage applicable to the job location. Please visit yourcaleres.com to review all associated benefits.