Senior Manager, IT Security Engineering

CULTIVATE A BETTER WORLD

Food served fast does not have to be a typical fast-food experience. Chipotle has always done things differently, both in and out of our restaurants. We are changing the face of fast food, starting conversations, and directly supporting efforts to shift the future of farming and food. We hope you will join us as we continue to learn, evolve, and shape what comes next on our mission to make better food accessible to everyone.

THE OPPORTUNITY

As the Senior Manager, IT Security Engineering, you will be responsible for overseeing the enterprise IT security Engineering and Operations team including security related controls, initiatives, and future solutions. Amongst other elements of cybersecurity engineering, this role requires a deep understanding of Zero Trust Network Access (ZTNA), Email Security, Threat Intelligence, Attack Surface Management, Endpoint Security, IOT security, Deception Technologies, Vulnerability Management, and Cloud Security Design Patterns and Management. You will be responsible for the enforcement of Chipotle policies by ensuring the confidentiality, integrity, and availability of data, guaranteeing maintenance of documentation, and acting as the lead in delivering security solutions. This position will also be responsible for the day to day operations as it relates to security technology at Chipotle.

WHAT YOU’LL DO

• Apply a thorough knowledge of IT security and architecture to manage the day-to-day operational responsibilities of a comprehensive information security program that aligns with the goals and objectives of the technology organization, effectively addressing the evolving threats to the companies’ environment and data; serve as an internal trusted advisor providing security consulting services across multiple technical domains to project teams and other professionals.

• Develop and maintain effective working relationships with multiple internal technology groups to keep alignment on strategies; promote and foster collaboration and standardization across multiple internal federated technology groups based on common technology interests and priorities; become a go-to subject matter professional to others within the firm to achieve the required goals and objectives.

• Participate in internal skills development activities for information security personnel on new technologies, controls, practices, techniques, and threats; develop and maintain effective working relationships with multiple cybersecurity vendors to advocate for product enhancements to meet Chipotle’s needs and inform internal stakeholders of upcoming features of interest.

• Stay abreast of emerging trends and technologies in information security, participating in the continuous improvement of the organization's security posture; engage in internal training sessions for information security staff on emerging technologies, controls, practices, techniques, and threats.

• Develop and mentor the Security team to provide exceptional service and solutions to security concerns. This may include but is not limited to individual performance management, hiring a team of top performers, providing training opportunities to advance career growth and knowledge, and performing regular one on ones with team members.

• Serve as an internal security subject matter expert while interfacing with applicable departments, groups, and individuals on relevant security initiatives and concerns.

WHAT YOU’LL BRING TO THE TABLE

• Bachelor's Degree (BA/BS) from 4-year college or university preferred.

• 5-8 years of experience in IT Security Engineering.

• 3-5 years of supervisory experience.

• Strong understanding of cloud security principles and experience with major cloud platforms (Azure, AWS, GCP, and OCI).

• Familiarity with security frameworks and standards such as NIST CSF, ISO 27001, MITRE ATT&CK, CSA Cloud Controls Matrix, and CIS.

• Specific experience managing Zero Trust Network Access (ZTNA), Email Security, Threat Intelligence, Attack Surface Management, Endpoint Security, IOT security, Deception Technologies, Vulnerability Management, and Cloud Security Design Patterns and Management.

• Relevant industry certifications (e.g., CISSP, CISM, GIAC) are highly desirable.

• Ability to communicate effectively with external business partners and internal teams to participate in the delivery of project requirements.

PAY TRANSPARENCY

A reasonable estimate of the current base pay range for this position is $155,000.00–$225,500.00. You are also eligible for annual cash bonuses and equity awards based upon performance and other fa