Security Architect & Operations Lead

Company Description

Since 1940, Dairy Queen® has been one of the world’s best known and loved brands. Based in Minneapolis, MN, International Dairy Queen Inc., (IDQ), is the parent company of American Dairy Queen Corporation. As a leading franchisor, there are more than 7,000 independently owned and operated restaurants in the U.S., Canada and more than 20 countries around the world. IDQ is a subsidiary of Berkshire Hathaway Inc. (Berkshire) which is led by Warren Buffett, the legendary investor and CEO of Berkshire.

Here at IDQ, we create extraordinary Fan experiences every day and we do this through our commitment to hiring and retaining only the best in class talent. We firmly believe that our employees are the catalyst to the success of the company where their initiative, strategic thinking, and entrepreneurial spirit are recognized and rewarded. We're looking for motivated, passionate and dedicated individuals with an inherent need and ambition to go after bigger challenges.

Job Description

We have an exciting opportunity for a Security Architect & Operations Lead based out of our corporate office in Bloomington, MN.  The Security Architect & Operations Lead guides a team of engineers, analysts, and key partners to design, implement and operate enterprise-wide, scalable security strategies and solutions, ensuring alignment with business objectives and regulatory requirements while driving innovation and continuous improvement. The position requires strong leadership, hands on technical expertise, and cross-functional collaboration to protect the organization.  This role will serve as a technology owner / subject matter expert for Security protection, incident management, security solutions, and related controls, processes, and policies.  The individual will lead the efforts to review and improve our security posture and operational services related to applications, servers, and endpoints, for both on premise and cloud technologies.  They will also be a mentor and technical resource to IT functional areas, sharing the overall responsibility for securing our systems, day-to-day maintenance and support of the company’s global infrastructure.

Key Accountabilities Include:

Security Engineering & Operations

• Develop, communicate, and execute security strategies for Cybersecurity defense, protection, detection, response, and recovery
• Design, build, deploy and/or operate security solutions to help scale the security program and assist with buildout and management of an overall Security Roadmap
• Build strong stakeholder partnerships across technical and non-technical teams
• Serve as a key security liaison and SME consultant, embedding secure design principles, control framework practices into cross-functional initiatives, projects, and enterprise transformations.
• Develop and maintain security reference architectures, standards, and roadmaps for infrastructure, applications, cloud, and enterprise systems.
• Ensure alignment with enterprise identity strategies and access control frameworks to support secure, scalable, and compliant solutions.
• Assess potential risks with existing and new infrastructure, applications, products and processes, and ensure security is appropriately considered and integrated
• Perform structured security risk assessments/tests to identify, prioritize, and provide recommendations or solutions for issues found
• Provide security requirements and recommend secure practices, threat modeling, and integration of security tools (e.g., SAST, DAST, SIEM) into development pipelines and cloud environments
• Maintain deep knowledge of security principles, frameworks (NIST and regulatory landscapes (PCI, SOX, SOC2).
• Research and understand emerging information security threats and their impact on the business environment
• Recommend new information security systems and controls to mitigate emerging threats and risks across the company
• Automate security controls using tools and scripting, where possible
• Ensure foundational security technologies and controls are in place and drive continuous improvement, including identity and access management, endpoint protection, vulnerability management, application security, cloud, data protection, logging and monitoring, and incident response
• Support and drive utilization of Security monitoring and alerting solutions and key managed security services partners
• Manage relationships with third-party security vendors and improve current security technologies
• Maintain technical documentation for solutions and standard operating procedures such that services are delivered in an efficient and effective manner
• Support and maintenance of IT security components and working to ensure conformity to the standards of operation for the Information Technology Depart