> Markdown version of [/jobs/ext/735869-director-of-information-security](https://www.wearedevelopers.com/jobs/ext/735869-director-of-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director of Information Security

- **Company:** Kwik Trip Inc.
- **Location:** La Crosse, WI, United States
- **Experience:** Expert
- **Salary:** $145,614.0 - $225,701.0
- **Contract:** Permanent contract
- **Skills:** Business Systems, Cloud Computing Security, Cyber Security, Identity and Access Management, IT Management, Intrusion Detection and Prevention, PCI Data Security Standards, Security Information and Event Management, Software Vulnerability Management, Information Technology
- **Published:** June 29, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=904f4610da2e3896

## About the Role

Do you have experience in Vulnerability management?, Do you have a Bachelor's degree?, * Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field

 * 6 to 8 years of experience in information security, risk management, cybersecurity operations, or IT leadership
 * Proven ability to lead cross-functional teams and deliver enterprise security programs
 * Strong understanding of security frameworks, governance, risk management, compliance, and security operations
 * Experience managing security technologies such as SIEM, endpoint protection, identity and access management, vulnerability management, and cloud security platforms
 * Experience supporting regulatory and compliance initiatives such as PCI DSS, SOX, privacy regulations, or other industry requirements
 * Strong communication, leadership, and strategic planning skills
 * Ability to translate technical risks into business-focused decisions and recommendations
 * Experience leading incident response efforts and driving continuous security improvements
 * High level of integrity, confidentiality, and adaptability in a fast-paced environment

## Description

Kwik Trip is seeking a strategic and execution-focused Director of Information Security to lead our enterprise cybersecurity program and help protect the systems, data, and technology services that support our coworkers, guests, and business operations. In this role, you will oversee the strategy, governance, and operational delivery of information security services while ensuring security practices align with business objectives, regulatory requirements, and evolving threats.

You will lead cross-functional teams responsible for security operations, security engineering, identity and access management, governance, risk and compliance, and security awareness initiatives. Success in this role requires balancing risk reduction, business enablement, operational excellence, and the development of high-performing teams., * Lead and develop the Information Security department, including multiple teams of managers, engineers, analysts, and security professionals

 * Define and execute short to mid-term 1 to 3 year cybersecurity strategies aligned with business goals and organizational risk tolerance
 * Own the operational delivery of security services, ensuring capabilities are reliable, scalable, and effective
 * Establish and maintain enterprise security governance, policies, standards, and procedures
 * Lead security operations, incident response, vulnerability management, and threat detection programs
 * Drive enterprise identity and access management strategies to protect critical business systems and data
 * Oversee governance, risk management, compliance, and audit activities to support regulatory and business requirements
 * Partner with technology and business leaders to integrate security into projects, platforms, and operational processes
 * Lead security architecture and technology roadmaps that support secure growth and modernization efforts
 * Develop and monitor security metrics, reporting, and risk indicators to support executive decision-making
 * Foster a security-aware culture through training, education, and stakeholder engagement
 * Partner with internal stakeholders, auditors, and external vendors to support security initiatives and compliance obligations
 * Ensure security programs balance risk reduction with operational efficiency and business enablement, Monday through Friday, daytime hours. Flexibility may be required to meet business needs. This position is based onsite at our La Crosse Support Campus.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [APIs and Architecture for scaling omnichannel payments](https://www.wearedevelopers.com/videos/90-apis-and-architecture-for-scaling-omnichannel-payments)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies)