Director, Information Security & Compliance Strategy

Caleres; Clayton (MO); On-site; USD 190,000 - 290,000; Full time

Job summary

Caleres is seeking an analytical security leader to design and drive the company’s cybersecurity vision, strategy, and programs. You will manage risk, governance, and security architecture across cloud, applications, infrastructure and data, while coordinating with Legal, Audit, HR and business stakeholders.

You will lead incident response, cyber resilience and third-party risk management, with a focus on SOX and PCI regulatory obligations and executive communication of security posture and

Qualifications

• Bachelor’s degree in Information Systems or related field.
• CISSP, CISM, CRISC or related professional certification preferred.
• 10+ years of progressive cybersecurity experience, including director-level leadership.
• Experience leading programs built on NIST CSF, CIS or similar frameworks.
• Strong understanding of enterprise security operations, cloud security, vulnerability management, SIEM, and GRC.
• Experience with Incident Response and tabletop exercises.
• Ability to translate security risk into executive-level presentations.

Responsibilities

• Lead Caleres’ information security program, strategy and roadmap with risk reduction focus.
• Provide executive reporting on security posture, risks, and investments.
• Establish security architecture across cloud, applications, infrastructure, identity and data; ensure compliance.
• Oversee incident response, disaster recovery and cyber resilience program.
• Manage third-party security risk and vendor relationships with cross-functional partners.
• Direct vulnerability management and remediation reporting; govern IAM and data protection governance.

Skills

Security leadership

Risk management

NIST CSF/CIS frameworks

Executive communication

Education

Bachelor's degree in Information Systems

CISSP certification (preferred)

Tools

SAP GRC

SailPoint

EDR/Cloud security

Job description

Caleres is seeking an analytical security leader to design and drive the company’s cybersecurity vision, strategy, and programs. You will manage risk, governance, and security architecture across cloud, applications, infrastructure and data, while coordinating with Legal, Audit, HR and business stakeholders.

You will lead incident response, cyber resilience and third-party risk management, with a focus on SOX and PCI regulatory obligations and executive communication of security posture and