Manager, Info Security Engineering

As a family company, we serve people and communities. When you work at Meijer, you’re provided with career and community opportunities centered around leadership, personal growth and development. Consider joining our family – take care of your career and your community!

 

Meijer Rewards

• Weekly pay

• Scheduling flexibility

• Paid parental leave 

• Paid education assistance

• Team member discount

• Development programs for advancement and career growth

 

Please review the job profile below and apply today!

​​This position is responsible for evaluating, integrating and implementing security products, processes and procedures to support the enterprise’s information security program. This position requires a strong understanding of business needs and initiatives as well as the ability to identify and apply security solutions that enable the business to be successful while maintaining the confidentiality, integrity and availability of information assets. This position requires a strong understanding of solution or application development products, processes and procedures, SDLC models, and related application security toolsets.​

 

What You'll be Doing:

• Builds, develops, staffs, and oversees Information Security Engineering team

• Develops and maintains a vision and strategy for enterprise-wide security engineering initiatives to maintain a strong cybersecurity posture

• Consults with IT technical services staff to evaluate, select, install and configure hardware and software systems that provide appropriate security functions

• Identify, implement, and maintain security products and technologies that support the enterprise’s security mission 

• Implement and maintain standards-based controls that effectively mitigate documented risk 

• Advises security administration staff on normal and exception processing of security authorization requests 

• Assist in remediation of infrastructure & application vulnerabilities and in implementing mitigating controls to lower risk 

• Integrate secure coding practices, toolsets, and application security-related education into the SDLC for developed software and establish security standards for third party software 

• Regularly measure and report on the effectiveness of security products and controls as they relate to risk mitigation  

• Communicate information security initiatives effectively to internal staff, internal business customers, Senior/Executive level leadership and to external vendors as required 

• Lead and manage team of Information Security Engineers, providing technical guidance and mentorship; prioritize their work in alignment with GRC and Security Enablement 

• Partners with Security Awareness Specialist to develop and implement education programs, conducting awareness seminars and workshops as appropriate 

• Gather and understand business requirements and develop effective strategies to secure them

• Performs situation analysis and recommendation for problem solving security-related issues

• This job profile is not meant to be all inclusive of the responsibilities of this position; may perform other duties as assigned or required.

What You Bring with You (Qualifications):

• Bachelor's degree in Computer Science, Engineering or related discipline 

• Masters preferred  

• 7+ years of related experience responsible for technical services for hardware/software engineering and production support of the areas of responsibility listed above 

• 5+ years of information security experience 

• 7+ years experience in IT application/solution development with a broad range of exposure to business planning, systems analysis, security solutions, and infrastructure support 

• CISSP or equivalent SANS/GIAC certification preferred 

• Demonstrated ability to deal with and lead in crisis situations; to articulate the problem/issue to senior leadership; and direct resources to address the impending problem 

• Successfully developed and implemented new technology 

• Demonstrated competency in developing effective solutions to diverse and complex business problems 

• Familiarity with multi-platform environments and their operational/security considerations 

• Ability to relate business requirements and risks to technology implementation for network and application security  

• Strong anal