Chief Information Security Officer (CISO)

Rich’s, also known as Rich Products Corporation, is a family-owned food company dedicated to inspiring possibilities. From cakes and icings to pizza, appetizers and specialty toppings, our products are used in homes, restaurants and bakeries around the world. Beyond great food, our customers also gain insights to help them stay competitive, no matter their size. Our portfolio includes creative solutions geared at helping food industry professionals compete in foodservice, retail, in-store bakery, deli, and prepared foods, among others. Working in 100 locations globally, with annual sales exceeding $4 billion, Rich’s is a global leader with a focus on everything that family makes possible. Rich’s®—Infinite Possibilities. One Family.

Job Summary

Do you want to shape and lead the information security strategy for a global enterprise? Do you have the skills and passion to protect our data, systems, and customers from cyber threats? Do you enjoy communicating with senior executives, customers, and industry leaders about security best practices and solutions? If so, you might be the ideal candidate for the Chief Information Security Officer (CISO) role at Rich Products. As the CISO, you will be responsible for creating and executing the security vision and goals across architecture, operations, governance, compliance, and implementation. You will report directly to the EVP, CIO and collaborate with various teams and stakeholders across the organization. You will need to have a strong business acumen, effective communication skills, and solid information security knowledge to succeed in this role. 

Key Accountabilities and Outcomes

• Work with CIO and other IT leaders to develop overall IT strategy in the context of the business strategy. Leads the development of IT security strategy and implementation roadmap and ensures its integration with the overall IT and Enterprise strategic plans. 
• Establishes and maintains a corporate wide information security program to ensure the protection of information assets and management of risk 
• Responsible for identifying, evaluating and reporting on information security risks (including third parties) in a manner that meets compliance and regulatory requirements.  
• Sets policies and standards that direct security functions to protect information technology systems, networks, applications, voice and data.  
• Proactively educate/work with business units to implement practices that meet defined policies and standards for information security. He or she will also oversee IT risk management activities and coordinate with the Enterprise Risk Management and Compliance office 
• Work closely with the Legal, Compliance and Risk management offices to understand requirements to enable Rich Products to adopt new digital transformational technologies, including cloud and IoT platforms. 
• Responsible for the management, oversight and operations of information security technologies, procedures and processes and safeguarding sensitive information 
• Works in close partnership with company executives, General Counsel's' Office and the company's Office of Audit Services to ensure alignment between information security and privacy policies, training, and practices across the company. 
• Serves as the process owner of all ongoing activities related to the availability, integrity and confidentiality of customers, business partners, employees and business information, in compliance with the Rich Products’ information security policies 
• Directs teams of technical, professional and management staff in the successful fulfillment of IT security system solutions delivery commitments. 
• Provide leadership, vision and direction to the IT security organization to ensure it will contribute to the company achieving its goals. Manage personnel, developing their skills and capabilities to meet the organization's needs, and building on existing recruiting capabilities to address new needs and skills gaps. 
• Creating a Security-Conscious/Resilience Culture (awareness brings it all together) 
• Lead cybersecurity operations and implementing disaster recovery protocols and business continuity plans with business resilience in mind. 

Knowledge, Experience and Skills

• Minimum of 10 years’ experience in a combination of risk management, information security and information technology. 
• Degree in business administration or a technology-related field, or equivalent work- or education-related experience. 
• Professional certification, such as a CISSP, CISM, CISA or other information security credentials, is preferred. 
• Knowledge of security and control frameworks, such as ISO 27000, CobiT, NIST, COSO and ITIL. 
• Proven ability to collaborate, build relationships and influence individuals at all levels in a matrix-manage