Sr. Director of Cybersecurity, Retail & PCI DSS
Overview
Sr. Director of Cybersecurity owns the enterprise cybersecurity program for Rack Room Shoes, a 515-store footwear retailer. You define strategy, governance, and risk posture, aligning security with business priorities and regulatory demands. Lead a team of security engineers, operations, and governance professionals, partnering with the CIO and executive leadership. This role drives PCI DSS compliance, cyber resilience, and security architecture across retail, eCommerce, and cloud environments. Join a 100-year-old company modernizing its security maturity.
What You'll Do10
- 1Own the enterprise cybersecurity strategy, roadmap, and target maturity model, aligning with business goals and emerging threats.
- 2Direct security operations including threat detection, incident response, and recovery, leading crisis management during significant incidents.
- 3Lead the PCI DSS compliance program, overseeing annual assessments, remediation, and continuous monitoring.
- 4Architect and maintain security controls for retail store systems, point-of-sale, eCommerce platforms, and AWS cloud environments.
- 5Establish identity and access management (IAM) strategy, deploying MFA, identity governance, and zero trust capabilities.
- 6Drive vulnerability management and penetration testing, ensuring enterprise remediation and hardening of systems.
- 7Manage third-party security partners, evaluating performance and enforcing contractual compliance.
- 8Build and mentor a high-performing security team, defining structure and career development paths.
- 9Communicate security posture and investment recommendations to the board and executive governance committees.
- 10Collaborate with infrastructure and business continuity teams to ensure disaster recovery and ransomware readiness.
Requirements10
- 112+ years in cybersecurity, information security, or network security, with 7+ years leading security teams and budgets.
- 2Bachelor's degree in IT, Cybersecurity, Computer Science, or related field.
- 3Deep knowledge of security frameworks like NIST CSF, ISO 27001, and PCI DSS.
- 4Experience in regulated environments, specifically PCI DSS compliance and audits.
- 5Proven track record in incident response and crisis management, with post-incident improvement.
- 6Expertise in cloud security, including AWS and Azure, and modern threat landscapes.
- 7Strong understanding of identity and access management, including MFA and zero trust.
- 8Ability to translate technical risks into business impact for executive decision-making.
- 9Excellent communication and presentation skills for board-level reporting.
- 10Preferred: CISSP, CISM, CRISC, or CCSP certifications.
Salary Insight
$190 - $230k per year
Similar open positions
Explore active roles that match your skills and interests.
AaraTechnologies Inc
VerifiedCyber Security Analyst, Retail & E-Commerce
You will own security monitoring and incident response for retail and e-commerce platforms, protecting payment systems and customer data. As a Cyber Security Analyst with 2-3 years experience, you will report to the Security Operations Lead and collaborate with DevOps and Compliance teams. You will detect threats, remediate vulnerabilities, and support PCI-DSS compliance. This contract role stands out by offering direct impact on fraud prevention and real-time threat mitigation.
Achieve
VerifiedChief Information Security Officer (CISO), Fintech
Own the enterprise cybersecurity strategy for a leading digital personal finance company, protecting customer trust across $40B in enrollments and $11B in loan originations. You will lead a risk-based security organization, partnering with executives, the Board, and regulators to enable secure innovation in a cloud-first, heavily regulated fintech. A key focus will be scaling the program to align with SEC, SOX, and PCI DSS 4.0 expectations while embedding security as a strategic business enabler. What sets this role apart is the mandate to drive AI security governance and innovation, securing the company's next phase of growth.
Business Wire
VerifiedCybersecurity Director, GRC & Cloud Security
As Cybersecurity Director at Business Wire, you will lead the global cybersecurity function, shaping strategy and protecting market-moving news distribution infrastructure. You will own the GRC program, direct cloud security for AWS and Azure, and guide Zero Trust architecture. Collaborating with executive leadership and external cyber defense partners, you will embed security across all operations. This role stands out for its dual focus on strategic leadership and hands-on technical oversight, including incident response and emerging tech risks like AI.
Belcan, LLC
VerifiedCybersecurity Operations & Communications Lead
Own the security operations and communications strategy for a global enterprise, coordinating incident response across SIEM, SOAR, and EDR platforms. You lead a team of analysts, manage threat intelligence feeds, and craft executive-level briefings. This role sits at the intersection of technical operations and stakeholder communication, reporting directly to the CISO. You will drive the adoption of MITRE ATT&CK framework and NIST guidelines, shaping the organization's cyber resilience.
Tier4 Group
VerifiedSenior Cybersecurity Project Manager - IT Security
The role involves owning enterprise cybersecurity initiatives at scale. The ideal candidate leads complex technology projects from conception to delivery while aligning with organizational security goals. This position offers a strong potential to convert into full-time employment.
Concert Golf Partners
VerifiedSenior Cybersecurity Manager, Enterprise Security Operations
You will own the daily operation and health of Concert Golf Partners' enterprise security platform across 40+ premier golf clubs. You will run EDR, SIEM, email security, and vulnerability management tools at scale, reporting to the VP of IT. You will set operating standards and lead technical initiatives with limited oversight. This role offers the chance to shape security operations for a multi-site enterprise, with travel to club locations.