Director of Information Security & GRC Excellence

C&S Wholesale Grocers; New Hampshire; Hybrid; USD 150,000 - 190,000; Full time

Job summary

C&S Wholesale Grocers seeks a Director, IS Security to lead security operations and compliance across on‑premise and cloud environments. You will oversee a cross‑functional team, align controls with NIST CSF/800-53 and ISO 27001, and drive risk‑assurance programs with internal and external stakeholders.

Responsibilities include managing Oracle EBS security, GRC systems, and relationships with vendors, while partnering with business units to embed security into initiatives and audits.

Qualifications

• Bachelor's degree in information security or related field.
• Active CISM and CISSP certifications preferred.
• 10–15 years in information security management and 5–7 years in project management.

Responsibilities

• Lead onshore and offshore security teams and manage workload and performance.
• Oversee security installations, processes and procedures across systems.
• Develop and maintain an information security program aligned with CSF, NIST SP 800-53, and ISO 27001.
• Ensure endpoint security, patch management, and compliance with security controls.
• Collaborate with business units to implement security policies and audits.
• Manage vendor relationships and contract compliance for security services.

Skills

Security leadership

Team management (onshore/offshore)

Security operations

Governance & compliance

Vendor relationships

Education

Bachelor's Degree - Information Security

CISM

CISSP

Job description

C&S Wholesale Grocers seeks a Director, IS Security to lead security operations and compliance across on‑premise and cloud environments. You will oversee a cross‑functional team, align controls with NIST CSF/800-53 and ISO 27001, and drive risk‑assurance programs with internal and external stakeholders.

Responsibilities include managing Oracle EBS security, GRC systems, and relationships with vendors, while partnering with business units to embed security into initiatives and audits.