Strategic VP, Information Security & Cybersecurity

Papa John's USA, Inc.; Michigan; Hybrid; USD 180,000 - 240,000; Full time

Job summary

Papa John's USA, Inc. seeks a strategic VP, Information Security & Cybersecurity to lead the organization’s security program.

This executive will shape the enterprise security strategy, align it with business goals, and drive risk-based decisions across technology, data, and operations. The role requires crafting policies, leading cyber defense, incident response, IAM, vulnerability management, and security architecture while partnering with risk, legal, compliance, and audit teams to enable

Qualifications

• 10–15+ years of progressive information security or cybersecurity experience.

Responsibilities

• Develop and execute a multi-year enterprise cybersecurity strategy and roadmap.
• Lead enterprise security operations, SOC, SIEM, EDR/XDR, MDR/MSSP.
• Establish and maintain incident response programs and playbooks.
• Set identity and access security practices including MFA, PAM, SSO, and Zero Trust.
• Oversee vulnerability and threat management and risk-based prioritization.
• Lead security architecture and secure-by-design principles across products and platforms.
• Ensure governance, risk, compliance, and third-party risk management.

Skills

Leadership

Executive communication

Cybersecurity strategy

Security operations

IAM & Zero Trust

Vulnerability management

Incident response

Security architecture

Risk & governance

Budget & vendor management

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field

CISSP, CISM, CRISC, or equivalent certification preferred

Job description

Papa John's USA, Inc. seeks a strategic VP, Information Security & Cybersecurity to lead the organization’s security program.

This executive will shape the enterprise security strategy, align it with business goals, and drive risk-based decisions across technology, data, and operations. The role requires crafting policies, leading cyber defense, incident response, IAM, vulnerability management, and security architecture while partnering with risk, legal, compliance, and audit teams to enable