Director, Information Security & Compliance

We seek an analytical leader passionate about designing innovative security solutions to join our IT team. In this critical leadership role, you’ll establish and oversee our company’s cybersecurity vision, strategy, architecture and programs to effectively manage risk for our business.

We are Caleres, a global footwear company with brands that fit people’s lives. We are ferocious about fit and living our mission of inspiring people to feel great…feet first.

We seek people who:

• Lead Caleres’ information security program, strategy and roadmap, including policies, capabilities, budget, investments, vendors and resources aligned with business priorities and risk reduction
• Lead enterprise cybersecurity risk management and provide executive leadership with clear reporting on security posture, material risks, emerging threats, performance measures, investment priorities and mitigation plans
• Establish security architecture, control standards and secure design requirements across cloud, applications, infrastructure, identity and data while leading regulatory, policy, audit and compliance activities, including SOX and PCI
• Lead managed detection, incident response and cyber resilience, including provider oversight, incident command, escalation, communications, business continuity, disaster recovery, backup protection and recovery testing
• Oversee third-party security risk and vendor relationships, partnering with Legal, Internal Audit, Human Resources and business stakeholders on regulatory obligations, remediation and risk decisions
• Direct vulnerability management, establishing remediation SLAs and providing clear risk and performance reporting
• Provide governance and role oversight for identity and access management, including SAP GRC and SailPoint
• Lead data protection governance, including data security posture management, data loss prevention, privacy-aligned controls and response to data-related incidents across cloud, collaboration, endpoint and enterprise platforms
• Participate in artificial intelligence and emerging technology governance by assessing security, privacy, third-party and data risks and helping define safeguards for responsible adoption
• Build a high-performing security organization and culture through talent development, succession planning, internal partnerships, security awareness and effective oversight of managed providers

We seek people with these qualifications:

• Bachelor’s degree in Information Systems or related field
• CISSP, CISM, CRISC or related professional certification preferred
• 10+ years of progressive cybersecurity experience, including prior director-level or enterprise leadership and responsibility for leading high-performing technical teams.
• Experience leading and maturing cybersecurity programs built on NIST CSF, CIS or similar frameworks.
• Strong understanding of enterprise cybersecurity operations, EDR, network and cloud security, vulnerability management, security architecture, identity governance, SIEM, DSPM, and GRC.
• Experience with Incident Response; leading IR activities, managing IR plan, organizing/conducting annual tabletop exercises.
• Strong communication and organizational skills, with the ability to translate security risk into concise executive-level presentations and decision-ready materials
• Collaborative, solutions-driven and committed to continuous learning about emerging cybersecurity trends and technologies