IT Manager - Information Security

AutoZone; Memphis (TN); On-site; USD 135,000 - 170,000; Full time

Job summary

AutoZone seeks an experienced IT Security Manager to lead a team responsible for developing, implementing, and supporting security controls across software and hardware platforms. The role manages budgets, project plans, and stakeholder communications to safeguard systems, networks, and data.

Ideal candidates will have a decade of security or cyber risk management experience in a large enterprise, with formal leadership and strong analytical, presentation, and coaching skills.

Qualifications

• Ten+ years in security or cyber risk management in a large enterprise.
• Formal leadership experience in a security context.
• Excellent problem solving and analytical skills.
• Strong presentation, facilitation, and writing abilities.
• Project management including estimating, planning, controlling, and execution.

Responsibilities

• Lead a team of IT professionals in developing, implementing, and supporting security controls across applications and hardware.
• Manage multiple security projects from planning to execution, including budgets and resource planning.
• Communicate status of activities with teams, management, and business partners.
• Build relationships with key business partners to identify and resolve issues.
• Select, develop, and motivate assigned staff and manage performance.

Skills

People leadership

Security management

Project management

Security engineering

Budget management

Education

Bachelor's degree in Computer Science or related field

Job description

This position manages a team of AutoZoners in the development, implementation, and support of AutoZone's existing and new software applications and hardware platforms that provide security controls. The IT Security Manager will be responsible for developing and implementing robust security measures, managing a team of security engineers, and ensuring the overall security of systems, networks, and data.

Manage and lead a team of IT AutoZoners that includes assigning/monitoring work, providing feedback, coaching and development, counseling, and salary administration.

Manages and tracks the progress of multiple projects. Performs project management and administration that includes work plans, resource planning and control, writing status reports, and preparing annual budgets.

Communicates status of activities with teams, peers, management, and business partners.

Builds relationship with key business partners to identify and resolve business issues.

Selects, develops, and motivates assigned staff.

At least ten years security and / or cyber risk management experience in a large enterprise environment, including formal leadership responsibilities.

People leadership/supervisory skills.

Problem solving and analytical skills.

Presentation, facilitation and writing skills.

Project management - estimating, planning, controlling, and execution.

Advanced knowledge of one or more of the following functional areas:

Infrastructure Security, e.g. Palo Alto NGFW (hardware, virtual, and cloud-native), Prisma Access, enterprise network segmentation, secure web gateways/proxies, Zero Trust / ZTNA, NAC / 802.1X, Cisco ISE, GCP network and infrastructure security, Cloud Armor, VPC Service Controls, cloud security posture management, enterprise PKI and certificate lifecycle management (Keyfactor), TLS and cryptographic standards, key management, post-quantum cryptography readiness, endpoint security, and security controls for AI-enabled endpoints.

Application Security and Automation, e.g. application security program management, secure SDLC, enterprise CI/CD pipelines, SAST, SCA, DAST, SBOM, penetration testing, code reviews, API security, Akamai WAF/CDN, vulnerability management, software supply chain security, application secrets management (CyberArk Conjur, Google Secret Manager), Infrastructure as Code (Terraform), security automation and policy-as-code, cloud-native application security, GKE/container security, and AI/LLM application and agent security.

Identity and Access Management, e.g. enterprise identity providers (Ping Identity / PingFederate / PingOne / Ping AIC), LDAP, SSO, SAML, OAuth 2.0, OpenID Connect, JWT, MFA, SCIM, identity lifecycle management, Privileged Access Management, GCP IAM, service accounts, Workload Identity Federation, workload/machine identity, and Identity-Aware Proxy (IAP).

Preferred: Bachelor's degree in Computer Science or related field.

Preferred: Understanding of, and experience with, scripting or coding languages.

Preferred: Security credentials such as Certified Information Systems Security Professional (CISSP)