Manager, Application & Cloud Security

About GNC

Since 1935, GNC has been a global leader in health and wellness innovation, inspiring people to achieve their goals with a trusted and dynamic range of products. As #TeamGNC, we prioritize our consumers, constantly collaborating and developing new ideas to deliver cutting-edge solutions. Our team is passionate about driving change and turning aspirations into actions. We believe that good health is the greatest gift, and there's nothing more rewarding than helping others achieve it. Join us in empowering others to Live Well!

What We’re Looking For:

At GNC we embrace a “Live Well” philosophy, fostering a dynamic environment where innovation meets passion.  Whether someone is an athlete or just starting to focus on their health, we want to deliver the cutting-edge products they deserve. We are looking for an individual who is excited and eager to play a pivotal role in driving excellence in the health and wellness industry. This position offers the opportunity to engage in a collaborative environment where you will make a personal impact every day. 

GNC is undergoing a significant digital and technology transformation - modernizing our ecommerce and martech stack, building a next-generation cloud and data foundation, and evolving into a digitally enabled, member-first wellness ecosystem.

We are seeking a Manager, Application & Cloud Security to play a critical leadership role in securing this transformation. This is a hands-on leadership role. The manager will both lead security strategies across applications and cloud environments and actively participate in implementation, including tooling, architecture reviews and developer engagement.

This role will lead the design, implementation, and continuous improvement of security controls across:

• A modern ecommerce ecosystem and an evolving martech stack
• Store, supply Chain, merchandising, and other internal enterprise applications.
• A new enterprise data foundation
• Cloud infrastructure and SaaS platforms supporting global operations

This leader will partner closely with Digital Engineering, Enterprise Applications, Data & Analytics, Infrastructure, and Product teams to embed security by design into everything we build.

This is not a reactive, ticket-driven security role. We are looking for a proactive, broad-thinking, hands-on, detail-oriented security leader who can operate at both architecture and execution levels - someone who understands how modern retail platforms are built and works closely with engineering teams to secure them.

 

What You’ll Do:

This is a Full-Time Salary Position

The Manager, Application & Cloud Security is responsible for leading the strategy, implementation, and continuous improvement of security practices across the organization’s applications and cloud platforms. This role ensures that secure development practices, cloud security controls, and vulnerability management processes are embedded across the software development lifecycle (SDLC) and enterprise cloud environments.

Secure GNC’s Application Stack

• Own and mature secure SDLC practices across the entire application stack
• Conduct threat modeling for digital commerce, payments, loyalty, customer identity systems and beyond
• Partner with product and engineering teams to integrate automated security testing and policy enforcement into CI/CD pipelines to enable scalable DevSecOps practices
• Manage and optimize application security testing (SAST, DAST, dependency scanning, penetration testing) and ensure results are integrated into developer workflows
• Build and scale a developer security program including secure coding guidance, security champions, and targeted developer training
• Secure third-party martech integrations and vendor connections

Lead Cloud Security Architecture

• Define and implement security controls across multi-cloud environments
• Enforce least privilege IAM, network segmentation, container security, and workload protection
• Partner with Infrastructure teams on secure cloud configuration and posture management Implement CSPM and runtime protection solutions

Protect the New Data Foundation

• Collaborate with Data & Analytics teams to secure data platforms
• Implement data classification, encryption, tokenization, and access governance
• Secure ML pipelines and API-driven data products
• Ensure compliance with privacy regulations (GDPR, CCPA, PCI DSS)
• Embed Security in Transformation Programs
• Act as securi