Vice President, Technology - Security and Compliance (CISO)

Job Title: Vice President, Technology - Security and Compliance (CISO)
Location: San Francisco, CA
Company: Williams-Sonoma, Inc.

About Williams-Sonoma, Inc.: Williams-Sonoma, Inc. is a premier specialty retailer of high-quality products for the home. Our family of brands includes Williams Sonoma, Pottery Barn, West Elm, and more. We are committed to delivering exceptional products and services to our customers through a multi-channel retail experience, including e-commerce, physical stores, and catalog operations.

Position Overview: We are seeking an exceptional Vice President of Security and Compliance (CISO) to lead our global security strategy and operations. This role is critical to safeguarding our assets, ensuring compliance, and supporting our business objectives. Ideal applicants have expertise in retail industry security best practices, including multi-channel protection, supply chain and distribution center security, e-commerce fraud prevention, point-of-sale system security, retail customer data protection, and balancing security with customer experience.

Responsibilities for this leadership role include:

• Strategic Leadership: Develop and execute a comprehensive security strategy aligned with Williams-Sonoma, Inc.’s business goals. Anticipate future threats and proactively implement long-term security measures.
• Technical Expertise: Oversee all aspects of cybersecurity, including network security, cloud security, application security, and data protection. Stay current with evolving cybersecurity technologies and methodologies.
• Business Integration: Act as a strategic partner to senior leadership, articulating the value of security investments and aligning security initiatives with business objectives. Communicate complex security concepts to non-technical stakeholders effectively.
• Risk Management: Lead risk assessment and management efforts, identifying potential risks and implementing preventative measures. Develop and maintain risk management frameworks and policies.
• Compliance and Regulatory Oversight: Ensure compliance with relevant laws, regulations, and standards (e.g., GDPR, CCPA, SOX, PCI-DSS). Manage audits and interactions with regulatory bodies.
• Incident Response: Develop and maintain comprehensive incident response plans. Lead the organization through crisis situations, minimizing the impact of security incidents, and conducting post-incident reviews.
• Team Leadership: Build and lead a high-performing security team. Foster a collaborative environment across departments, integrating security into all business processes.
• Continuous Improvement: Embrace innovation, seeking out and implementing cutting-edge technologies and best practices. Commit to continuous learning and professional development for yourself and your team. Develop Key Performance Indicators for the services and work performed by the various teams.
• Ethical Leadership: Demonstrate unwavering ethical judgment and integrity, prioritizing the organization's long-term security and reputation.

Skills/Experience:

• Bachelor’s degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• 15+ years experience in the Tech Compliance/Risk/Security domain with 5+ years leading in a Chief Information Security Office or equivalent role in a medium to large enterprise (omni-channel retailer preferred).
• Proven experience as a CISO or similar senior security leadership role in a large, multi-channel retail organization.
• Deep technical expertise in cybersecurity, including network, cloud, application security, and data protection.
• Strong business acumen with the ability to align security initiatives with business objectives.
• Exceptional communication skills, with the ability to convey complex security issues to non-technical stakeholders.
• Demonstrated experience in risk management, compliance, and regulatory oversight.
• Proven crisis management and incident response experience.
• Strong leadership and team-building skills, with a collaborative approach to working across departments.
• Commitment to continuous learning and innovation in the field of cybersecurity.
• High ethical standards and integrity.

We think you should be excited about this opportunity because you will:

• Lead and shape the future of security and compliance at a forward-thinking company.
• Manage and elevate a team that values innovation, creativity, and diverse perspectives.
<