Director, Information Security & GRC

C&S Wholesale Grocers, LLC; Keene (NH); Hybrid; USD 140,000 - 200,000; Full time

Job summary

C&S Wholesale Grocers, LLC is seeking a Director of IS Security to lead security operations, governance, risk and compliance programs across onshore and offshore teams, and to ensure protective measures for on‑prem and cloud environments.

The role collaborates with infrastructure, applications and business units to implement controls, manage Oracle EBS and GRC security, drive audits, and guide vendor relationships while aligning with NIST/ISO standards and industry best practices.

Qualifications

• Bachelor's degree in Information Security or related field required.
• CISM and CISSP certifications preferred or in progress.
• Experience leading security teams and programs across onshore/offshore staff.

Responsibilities

• Manage onshore and offshore security team including delegating work assignments, performance reviews, and staff development.
• Manage installations of security applications, processes, procedures and equipment; maintain an information security program aligned to CSF/ISO 27001.
• Oversee security of endpoints, apply patches and ensure compliance with controls.
• Develop security initiatives to increase awareness and reduce risk; liaison with stakeholders to validate requirements.
• Manage vendor relationships, contracts and audit readiness; maintain GRC security systems.

Skills

Security leadership

Security operations

Governance, risk & compliance

Education

Bachelor's degree in Information Security

CISM

CISSP

Job description

C&S Wholesale Grocers, LLC is seeking a Director of IS Security to lead security operations, governance, risk and compliance programs across onshore and offshore teams, and to ensure protective measures for on‑prem and cloud environments.

The role collaborates with infrastructure, applications and business units to implement controls, manage Oracle EBS and GRC security, drive audits, and guide vendor relationships while aligning with NIST/ISO standards and industry best practices.