Manager of IT Security

Manager of IT Security Location: Headquarters - Fort Wayne, IN / Dallas, TX Level: Salaried/Manager Division / Department: Information Technology Reporting to position: Director, Infrastructure/Operations/Security Travel: Occasional About the Role: The Manager, IT Security is a strategic leadership role responsible for overseeing Do It Best’s information, cyber, and technology security. S/he will develop, implement and manage the company’s IT security strategies and operations. This role is vital to safeguarding the integrity, confidentiality, and availability of the organization’s information assets. The position reports directly to the Director of Infrastructure/Operation/Security and works closely with other IT leaders, business unit heads and external stakeholders to ensure that IT security practices align with the organization’s goals and regulatory requirements. Responsibilities include:

• Strategic Leadership and Vision: Develop and implement a comprehensive IT security strategy that aligns with the organization’s objectives and risk tolerance. Lead the IT security team in identifying, developing, implementing, and maintaining security processes across the organization to reduce information and IT risks, respond to incidents, and limit exposure to liability in all areas of financial, physical, and personal risk. Advise the VP of IT and other senior management on security direction and resource investments to secure information assets and technologies effectively.

• Risk Management: Conduct regular risk assessments to identify vulnerabilities, assess potential impacts, and implement appropriate mitigation strategies. Develop and maintain an IT security risk management program, including frameworks for risk assessment and risk treatment plans.

• Policy Development and Compliance: Develop, maintain, and oversee the organization’s information security policies, standards, and procedures to ensure they are up-to-date with evolving cybersecurity threats and compliance requirements. Ensure compliance with legal, regulatory, and contractual security obligations and best practices.

• Incident Management and Response: Lead the development and implementation of an incident response plan and breach notification process that can be executed with speed and accuracy. Oversee the investigation of security breaches and assist with disciplinary and legal matters associated with such breaches.

• Security Operations and Infrastructure: Oversee the operation of all IT security measures, including firewalls, anti-virus software, patch management systems, and intrusion detection/prevention systems. Evaluate and recommend new security technologies and countermeasures against threats to information assets.

• Team Leadership and Development: Lead, mentor, and develop the IT security team, fostering a culture of continuous improvement, collaboration, and high performance. Define clear team goals and KPIs, conducting regular reviews to ensure alignment with the organization’s strategic objectives.

• Stakeholder Engagement: Collaborate with IT and business leaders to ensure security projects and measures are aligned with business objectives. Serve as the primary contact for external agencies and auditors regarding IT security matters.

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.

• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent.

• Minimum of 10 years of experience in a combination of IT security and IT management roles, with at least 7 years in a team leadership position.

• Minimum 5 years experience representing a company’s security posture to government agencies and Board-level positions, is strongly preferred.

Skills and Abilities:

• Extensive knowledge of information security concepts, practices, and technologies, including risk assessment methodologies, policy formation, role-based authorization methodologies, authentication technologies, and security attack pathologies.

• Excellent understanding of national and international laws, regulations, policies, and ethics related to IT security.

• Strong leadership and communication skills, with the ability to articulate complex security concepts to non-technical stakeholders at the highest levels of the company and to customers.

• Demonstrated ability to develop and maintain strong working relationships with a variety of stakeholders, including senior executives, IT personnel, customers and external partners.

• Full insurance benefits package including Medical, Dental, & Vision

• Paid time off to foster work/life balance

• Profit sharing

• Bonus Pay opportunities

• Retirement funding opportunities

• Education reimbursement

• Health club reimbursement

• Career advancement opportunities

About Do it Best Group Headquartered in Fort Wayne, IN, the Do it Best Group is the world’s largest hardware, lumber, and building materials buying cooperative in the home improvement industry. With nearly $6 billion in annual sales, we support thousands of independently-owned locations across the United States and in more than 60 countries worldwide. Partners in the company have the flexibility to operate under the Do it Best, True Value, or their own local store identities, offering a diverse range of branding options to best serve their communities. Our Philosophy: Serving others as we would like to be served Our Mission: Making the best even better Our Goal: Helping members grow and achieve their dreams Please note that for this role, relocation assistance is not available. Candidates should be willing and able to work in Fort Wayne, IN without the need for relocation support. We encourage local candidates or those already planning to move to the area to apply.