Sr. Director, IT Security

Serving the needs of all families with young children, Carter’s Inc. is the largest North American apparel retailer exclusively for babies and young children, encompassing Carter’s, OshKosh B’gosh, Skip*Hop and Little Planet brands. Meaningful work, constant learning, genuine people, and a community guided by core values that promote inclusion and innovation is in everything we do. There are many reasons to build your career at Carter's.

HOW YOU'LL MAKE AN IMPACT
This role is responsible for establishing, maintaining and overseeing the enterprise-wide vision, strategy, architecture, policies and programs to ensure information assets are protected, while maintaining an understanding and managing the risks and challenges facing the company and the retail industry. This role will ensure information technology (IT) systems, networks, and internal and external computing environments are secure, and security and business continuity risk/reward decisions are balanced and comply with regulatory and legislative requirements. He/She will create an information privacy and security-conscious culture across the organization. This position will develop and implement information security initiatives; security frameworks; conduct and oversee security operations for the ongoing protection of the Carter’s global environment; monitor and audit compliance with regulatory and internal standards; and lead investigations related to policy violations, security breaches, and computer crimes.  

Directs and manages the activities and personnel of the Information Security Services Team, including focus on the following capabilities: 
 

IT Policies, Risk, & Compliance – 25% 

• Oversees the development, implementation, and maintenance of global security policy, enterprise security standards, guidelines and procedures for appropriate risk mitigation and to support regulatory or industry compliance (e.g. SOX, PCI, HIIPA) 

• Serves as an expert advisor to executive leadership, Board or Directors, and Audit Committee in the development, implementation, and maintenance of a strong information privacy and security program and infrastructure including network access and monitoring policies

• Develops policies and procedures to ensure physical safety of employees and visitors; Creates workplace violence awareness and prevention programs, as required, in partnership with Facilities Management or corporate/enterprise Risk Management teams 

• Collaborates with Legal Counsel, Internal Audit on compliance, security, and privacy practices, processes, procedures, and protocols; Monitors and reports statuses, and actively participates in audits or reviews as required 

• Maintains relationships with local, state and federal law enforcement and other related government agencies in support of security program and roadmap, with partnership and direction from Legal Counsel

• Must be able to interact effectively with applications teams, peers, and management staff to create application security processes and protocols

• Must be able to develop, manage and maintain the proposed capital and operating budget for IT Security, Risk, and Compliance department.  Will conduct ongoing budget control through budget review and approval processes, and monitor departmental performance 

• Be engaged with and understanding of business environment, projects, considerations, and constraints in implementing all policies and associated technologies 
   

Security Operations Management – 35% 

• Be responsible for 24/7 security monitoring and threat detection/prevention for the organization 

• Develop and report on security operations dash