Sr. Staff PISO

Prior to applying it is required that you inform your manager of your desire to post for a new position.

Why choose us?

Are you ready to take the next step in your career? Join us for an exciting opportunity at Albertsons Companies, where innovation and customer service go hand-in-hand!

At Albertsons Companies, we are looking for someone who’s not just seeking a job, but someone who wants to make an impact. In this role, you’ll have the opportunity to lead, innovate, and contribute to the growth of a company that values great service and lasting customer relationships. This position offers the chance to work in a fast-paced, dynamic environment that’s constantly evolving.

What you will be doing

The Sr. Staff Portfolio Information Security Officer (PISO) is a highly technical senior security internal consultant position that reports to a PISO Director and serves as the trusted advisor to Portfolio executives and to the CISO. They are responsible for establishing and driving a portfolio-specific information security practice aligned with the portfolio's risks and the overall Albertsons Information Security Program.

This Sr. Staff Portfolio Information Security Officer will advise on security strategy, risk management, and information security requirements to multiple application portfolios. This security professional will be responsible for coordinating with business and technology partners to secure the assets, information, and processes associated with these critical foundational functions.

This position will be based out of Boise, ID or Phoenix, AZ.

Main responsibilities:

- Ensure that all portfolio project teams receive, understand, and know how to execute on their information security and data privacy requirements, and be the liaison that connects them to all relevant services and stakeholders

- Regularly meet with technology and business leaders to align portfolio projects, priorities, and needs with the Information Security Program’s priorities and capabilities to continually improve the overall Albertsons information security posture

- Leverage, mature, and scale our threat-modeling practice to address known and emergent threats to ACI data, technology, and business initiatives

- Evangelize security awareness across the portfolio to drive the reduction of risk and the adoption of security services

- Be the seasoned security expert and subject matter expert that the rest of the Information Security Program can come to for portfolio-specific insights

We are looking for candidates who possess the following:

Information Security skills and experience

- You have team-oriented interpersonal skills and the ability to interface effectively with a broad range of people and roles, including business executives, technology leaders, engineers, and enterprise suppliers

- You are a self-starter who will build working relationships with portfolio partners and seek out the areas of greatest cybersecurity risk with limited supervision

- You have a strong desire to continually learn about new technologies

- You possess strong conceptual thinking and communication skills

- You maintain calmness and clarity of thought under pressure and can maintain confidentiality

- You have a deep understanding of strategic business objectives and the ability to drive results toward those objectives

- You have a working knowledge of compliance obligations relevant to retail organizations (e.g. PCI-DSS, SOX, HIPAA, etc.)

- You have a strong understanding of technology risk, information security fundamentals, defense-in-depth practices, risk assessment fundamentals, and risk management practices

- You can interpret and contextualize vulnerability reports from diverse sources and describe risk in business-impact terms

- Experience with cloud deployment models including tradeoffs between IaaS, PaaS and SaaS and techniques available to secure them

- Fluency in CI/CD pipelines and opportunities for inserting security controls into the development lifecycle

- Working knowledge of industry-standard threat modeling frameworks and methodologies, including STRIDE and MITRE ATT&CK.

Key Success Criteria:

- Increased awareness of and compliance with information security and data privacy requirements across portfolio teams

- Increased adoption of security tooling and services across portfolio business applications

- Strong partnerships with portfolio leadership and associates built on a foundation of credibility and shared goals

Qualifications:

- Retail experience highly preferred but not required.

- Azure/GCP/Cloud experience and/or certifications highly preferred.

- 4 plus years of experience in an information security role.

- Information security professional certification desired (e.g. CISSP, CISM, CISA etc.).

- Ability to contextualize information security work in a business context.

- Strong understanding of risk management methodologies and regulatory requirements pertaining to information security, privacy, and/or data security.

- Analytical aptitude with an emphasis on investigative, methodical critical questioning and logical thinking; a data-driven decision maker.

- Ability to drive toward consensus and be a strong collaborative partner in a large and complex organization.

- Excellent communication and interpersonal skills with the ability to effectively present technical information and tailor responses to customer understanding.

- Strong sense of urgency, business ethics, dependability, and follow through.

We also provide a variety of benefits including:

- Competitive wages paid weekly

- Access to up to 50% of your earned wages before payday, via our partnership with Stream

- Associate discounts

- Health and financial well-being benefits for eligible associates (Medical, Dental, 401k and more!)

- Time off (vacation, holidays, sick pay). For eligibility requirements please visit https://urldefense.com/v3/__https:/myaci-benefits.com/__;!!K1aXqncla1X7G90AkdLmCg!rAQQIgK5qTHEOZimihiTu-Cq5CqDd5yTyDy2Md9yy2X9n5N5-LNd_VFz-Ph78hdScxWtyckceXfHreYVJ1PsQk_8tfijDVHG5g$ myACI Benefits

- Leaders invested in your training, career growth and development

- An inclusive work environment with talented colleagues who reflect the communities we serve

Our Values – Click below to view video: ACI Values

A copy of the full job description can be made available to you.

#LI-MF1