Director, Information Security

About the Team

It’s an exciting time in technology, and that buzz is felt throughout PetSmart! We are continuing to grow at a faster pace and we want to continue to provide best-in-class experiences for pets and pet parents.

Our Technology team has 6 different departments: Information Security, Service Delivery, Business Enabling Systems, eCommerce & Marketing Technology, Data and Stores, Services & Supply Chain.

 

Whether it’s online or in our stores, the work that the IT team does is instrumental in PetSmart’s success. We have a strategic and actionable plan underway and are looking for associates who are just as excited about it as we are.

About the Location

Collaborative Work Environment:At PetSmart, teamwork and connection are core to how we thrive. This role is based at our Phoenix Home Office, with an expectation of working a minimum of four days in the office each week. In a standard work week, associates may work up to one remote “flex day” (with leader approval). Our hybrid approach is designed to foster strong collaboration while also supporting flexibility and individual success.

About the Job

The Director of Information Security leads execution of PetSmart’s cybersecurity program across security operations, security engineering, compliance support, and related governance activities. Reporting to the CISO, this role is responsible for building, maturing, and managing cybersecurity capabilities that protect PetSmart’s systems, data, business operations, digital platforms, and customer trust.

 

This leader translates enterprise security strategy into practical roadmaps, operating processes, and measurable outcomes. The role partners closely with technology, legal, privacy, compliance, internal audit, finance, and business leaders to strengthen detection and response capabilities, improve security engineering practices, support regulatory and policy requirements, and ensure disciplined management of cybersecurity resources and investments.

 

This role focuses on cybersecurity program leadership, operational execution, control effectiveness, and continuous improvement while supporting enterprise priorities, governance practices, and the PetSmart’s broader security and risk management objectives.

 

Program Leadership: • Lead execution of PetSmart’s cybersecurity program across assigned domains in alignment with enterprise strategy and CISO direction• Develop and manage cybersecurity roadmaps, priorities, and delivery plans that support business operations, customer trust, and technology modernization• Establish clear performance measures and operating rhythms for cybersecurity services, initiatives, and control improvement efforts• Provide regular updates to the CISO and senior leadership on program status, operational trends, material issues, and remediation progress• Identify risks, dependencies, and capability gaps within assigned scope and escalate material matters through established governance channels• Promote a culture of accountability, collaboration, operational rigor, and continuous improvement across the cybersecurity team

Security Operations:• Lead day to day security operations including monitoring, alert triage, investigation, incident coordination, containment support, recovery follow up, and post incident improvement actions• Oversee security monitoring capabilities to improve visibility across PetSmart’s corporate, store, distribution, and digital environments• Maintain and mature incident response procedures, escalation paths, playbooks, and communication workflows• Direct vulnerability management processes including identification, prioritization, reporting, and remediation coordination with technology owners• Incorporate threat intelligence, incident trends, and control performance data into detection improvements and operational priorities• Track and report metrics such as incident trends, response timeliness, remediation aging, and vulnerability exposure

Security Engineering:• Lead implementation and continuous improvement of security controls across infrastructure, cloud, identity, endpoint, network, and application environments• Partner with enterprise architecture, infrastructure, digital, and application teams to embed security requirements into technology design and delivery• Drive execution of security engineering initiatives such as identity improvements, privileged access controls, cloud security capabilities, data protection, logging enhancements, segmentation, and automation• Oversee evaluation, implementation, integration, and lifecycle management of security technologies within approved standards and budgets• Define and maintain technical security standards, implementation patterns, and control expectations to support consistency and scale• Improve enginee