Director Cybersecurity Architecture - St. Louis, United States - Post Holdings Inc.

Post Holdings Inc. St. Louis, United States

3 weeks ago

Regular Full time

Description

Job Description

Business Unit Overview

Feeding the world is what we do – how we do it is unique. We are not your textbook consumer packaged goods company. While others are slow to make change happen, we continuously drive both inorganic and organic growth. Our history is evidence of that fact with over years of heritage and growth from brands that transcend generations like Grape Nuts, Honey Bunches of Oats, Fruity Pebbles, Malt-O-Meal, Egg Beaters, Peter Pan Peanut Butter, Bob Evans Farms and more. And our foodservice and ingredient businesses supply other brands, restaurants, stores, and products you love.

Our offices and manufacturing sites are in locations in seven countries, and we have ,+ employees. Over the past years, Post has made + acquisitions and reached billion in net sales in fiscal 1. During turbulent times of market uncertainty, the food industry has provided a level of stability unlike other industries.

Post Holdings, Inc. is headquartered in Brentwood, a suburb of St. Louis, Missouri. Our casual professional atmosphere encourages team members to collaborate, innovate and support our operating companies. Our passion and drive advance the reputation of our operating companies and brands—together, we make a difference.

Responsibilities

Safeguarding critical information managed and stored in our environment is imperative for the smooth functioning of our business and to uphold our brand reputation. We are currently seeking a Director of Cybersecurity Architecture and Operations, who will be accountable for maintaining the cybersecurity architecture, while delivering operational excellence for the Enterprise. This role will ensure that security tools, controls, processes, and policies are designed to prevent and respond to threats targeting our Corporate, Manufacturing, and Distribution technical environments.

This role will work in a matrixed organization with multiple Post Holdings Operating units, offering guidance, oversight, and support for operations activities and architecture. The Director will be expected to review emerging technological trends and facilitate the potential adoption of these trends to create a more secure environment. This position has technical and managerial responsibilities; the ability to address technical issues and lead by example is required.

In this role, the Director will contribute to all data/information security policies, guidelines, standards, evaluations, roles, and corporate awareness. The Director will collaborate with user groups, technical groups, and Internal/External Auditors to continuously develop a security architecture designed to offer a high level of security over data processing while preserving system usability and user productivity. The Director should be capable of designing and communicating the value of flexible security solutions, dictated by the needs of a unique hybrid or traditional (on-premise) and cloud-based technology environments.

Architecture

Assist Corporate and the Operating Units in development an annual risk-based information security plan guided by security architecture changes aligned to Post Holding's strategies, objectives, and risk profile

Collaborate with the business to explore new technologies, identify available market solutions and evaluate capabilities of products to protect the confidentiality, integrity, and availability of Post's data and systems

Evolve the current framework for security controls, processes, roles, and responsibilities throughout the organization

Manage relationships with internal and external technology partners to understand features and technology roadmaps to better align on long term objectives and opportunities

Keep up with emerging technology and trends analyzing the potential applicability and effectiveness in the Post environment to create competitive opportunities

Prepare presentations at the technical, manager, and executive level to effectively communicate proposed changes to the architecture

Prepare business cases that articulate and communicate the value and desired outcome of projects

Contribute to project planning and ensuring that products and deliverables meets design, contracts and work plans

Facilitate cross partner technical designs to ensure the break-up of technology components are appropriate and provide future agility

Develop compensating controls for security gaps that cannot support preventive controls

Operations

Responsible for maintenance, oversight, and operation of security tools, processes, and policies to defend, detect, and respond to threats, vulnerabilities, and attacks targeting the corporate network and data repositories

Lead, inspire and grow a team of 3+ technical resources

Responsible for monitoring, detection, and response activities including liaising with third party providers for Corporate and Shared Services

Develop, execute, and refine an Enterprise Incident Response (I/R) Program for both Operational Technology (OT) and Information Technology (IT) Environments

Monitor multiple sources (news, threat feeds, information sharing partnerships) for identified vulnerabilities, identify applicability of the vulnerability to Post and communicate priority and scope to affected stakeholders

Implement continuous improvement to current prevention or detection controls to mitigate identified security gaps

Define and increase service levels for the operations team

Manage awareness program including cyber training, phishing testing, and general cyber awareness

Manage our threat identification and threat intelligence capabilities

Provide I/R Leadership during incidents through response and recovery

Collaborate with Business Units to develop and execute plans to improve incident readiness across the Enterprise

Designing, organizing, and facilitating cybersecurity table-top exercises, that help the organization assess and improve its incident response capabilities. Create and maintain comprehensive incident playbooks, which serve as step-by-step guides for responding to various types of security incidents, such as data breaches, DDoS attacks, and insider threats

Provide reporting and metrics on I/R.

Select and manage third party providers to assist with I/R

#LI-Hybrid

Qualifications

EXPERIENCE

+ years IT leadership experience managing within complex technical environment

6+ years of information security experience including SaaS, cloud hosting, progressive security architecture; preferably within a publicly traded and CPG or Manufacturing sector or acquisition focused organization

5+ years of architecture experience designing technical solutions; Cybersecurity or Infrastructure preferred

3-5 years' hands on experience with security tools suites such as:Anti-Malware & Anti-VirusVulnerability Scanning & Security PatchingPassword Access Management, MFA and SSOContent Blocking & PhishingSIEM & SOC ModelAI/ML Email SecurityDLP and/or DRM (desired)

3-5 years' experience in managing security within major ERP Software environments is preferred (such as SAP, JDE, or NetSuite)

2+ years' e xperience managing security for cloud vendors directly and security integration into SaaS applications

EDUCATION

Bachelor's degree – Computer Science/Information Systems/Information Security required

MS or MBA preferred

Cybersecurity Certifications with a management focus (CISSP, CISM, CISA, GCIH) preferred

KNOWLEDGE AND SKILLS

Skilled in working with information security control frameworks NIST)

Knowledge of relevant laws, policies, procedures, or governance as they relate to work that may impact critical systems

Familiar with incident response and handling methodologies

Experience with intrusion detection methodologies and techniques for detecting host and network-based intrusions via intrusion detection technologies

Knowledge of network security architecture concepts including topology, protocols, components, and principles

Proficient in system administration, network, data protection, and operating system hardening techniques

Knowledge of disaster recovery continuity of operations plans

Knowledge of host/network access controls access control list) and firewall technologies.

Comfortable with principles used to manage risks related to the use, processing, storage, and transmission of information or data

Experience with network systems management principles, models, methods end-to-end systems performance monitoring), tools and network traffic analysis methods

Stays abreast of new and emerging IT and information security technologies

Knowledge of penetration testing principles, tools, and techniques

Knowledge of system and application security threats and vulnerabilities mobile code, cross-site scripting, SQL injections, and malicious code)

Familiar with systems lifecycle management principles, including software security and usability

Objectively assess the impact, likelihood, velocity, and magnitude of identified risks

Objectively advise on any number of technical controls that will mitigate risk while not imposing undue burden on those who must implement the controls

Mediate differing perspectives on risks between a variety of Technology Division stakeholders

Director Cybersecurity Architecture

1 week ago

Post Holdings St. Louis, United States Regular Full time

Responsibilities · Safeguarding critical information managed and stored in our environment is imperative for the smooth functioning of our business and to uphold our brand reputation. We are currently seeking a Director of Cybersecurity Architecture and Operations, who will be ac ...
Information System Security Developer

3 weeks ago

CALIBRE Systems St. Louis, United States

Information System Security Developer · St. Louis, Missouri · Job ID: 4573 · CALIBRE Systems Inc., an employee-owned Management Consulting and Digital Transformation Company is seeking a Information System Security Developer (Mid-level) that will design, develop, test, and eval ...
Vulnerability Assessment Analyst

22 hours ago

CALIBRE St. Louis, United States

CALIBRE Systems Inc., an employee-owned Management Consulting and Digital Transformation Company is seeking a Vulnerability Assessment Analyst (Mid-level) that will perform assessments of systems and networks within a Government enclave and identify where those systems/networks d ...
Firewall Engineer

5 days ago

CACI St. Louis, United States

Firewall EngineerJob Category: EngineeringTime Type: Full timeMinimum Clearance Required to Start: TS/SCIEmployee Type: RegularPercentage of Travel Required: Up to 25%Type of Travel: Local* * *Are you passionate about working with leading-edge technologies, on high-performing tea ...
Hosting & Cloud Services (HCS) Sr. Solutions Architect & SysOps Leader - St. Louis, MO

3 weeks ago

Hubell St. Louis, United States

Job Overview · The Hosting & Cloud Services (HCS) Sr Solutions Architect & SysOps Leader reports directly to the HCS Architecture Sr Manager and is responsible for cloud architecture and operations support for customer facing Hubbell product environments. This role serves as a t ...
Structured Cable Technician

2 weeks ago

CACI St. Louis, United States

Structured Cable TechnicianJob Category: Engineering and Technical SupportTime Type: Full timeMinimum Clearance Required to Start: NoneEmployee Type: RegularPercentage of Travel Required: Up to 10%Type of Travel: Local* * *CACI IS THE WINNER of a long-term prime contract with the ...
TRANSCOM IGC

3 weeks ago

IT Partners,Inc Saint Louis, United States

Job Description · Job DescriptionThe candidate will have experience providing engineering solutions to meet security compliance. The cybersecurity engineer will work across multiple development teams to ensure solutions, architectures and designs incorporate security best practic ...
TRANSCOM IGC

3 weeks ago

IT Partners,Inc Saint Louis, United States

Job Description · Job DescriptionITP is seeking Cloud Administrator to support the transition of a critical application into the government, commercial or hybrid cloud. The Cloud Administrator will support the onboarding, provisioning and maintaining all cloud resources as define ...
Cybersecurity Intern/Co-op

1 day ago

ARCO a Family of Construction Companies St Louis, United States

ABOUT YOU: · Are you an out of the box thinker? Are you passionate about solving business problems with the latest technology? If the answer is, Yes then we have an exciting, internship opportunity for you. Who are we? We are ARCO, a Family of Construction Companies. · We are l ...
TRANSCOM IGC

3 weeks ago

IT Partners,Inc Saint Louis, United States

Job Description · Job DescriptionITP is seeking Cloud Architect to support the transition of a critical application into the government, commercial or hybrid cloud. The Cloud Architect will provide support the plan, strategy, design, development, deployment of the application int ...
Network Security Engineer

3 days ago

GuidePoint Security St Louis, United States

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation' ...
Information Assurance/Security Specialist

1 day ago

Abile Group, Inc. St Louis, United States

Overview: · Abile Group has an exciting and challenging opportunity for an Information Assurance/Security Specialist on a 10 year contract providing Network and Cybersecurity services supporting an Intelligence Community customer. All the personnel on the team will work together ...
Channel Systems Engineer

1 week ago

Fortinet St Louis, United States

Job Description · Position: Systems Engineer · Objective: · We are looking for a Systems Engineer to work closely with a channel sales representative in a defined territory. The Systems Engineer's main mission will be to support the sales organization in all technical matters r ...
Network Security Engineer

2 weeks ago

247 Headhunting Saint Louis, United States

Job Description · Job DescriptionNetwork Security Engineer - Remote · Missouri full state · Good Security education (Certificates/training) can take the place of a Bachelors -- but both would be ideal · Client is adopting a new firewall management tool that will require additiona ...
FedRAMP Security Solutions Architect

1 day ago

Equifax St Louis, United States

Equifax is where you can power your possible. If you want to achieve your true potential, chart new paths, develop new skills, collaborate with bright minds, and make a meaningful impact, we want to hear from you. · Equifax is a leading financial technology organization committe ...
IEC Engineer

3 weeks ago

Innovative Data Solutions, Inc. St Louis, United States

Job Summary · We are seeking an experienced Active Directory Engineer to support an IC customer/contract in the St. Louis, MO area. Security requirements are a TS/SCI clearance and eligibility to obtain a CI polygraph. · Specific Duties and Responsibilities: · Collaborate and ...
IEC Engineer

3 weeks ago

Innovative Data Solutions LLC Saint Louis, United States

Job Description · Job DescriptionJob Summary · We are seeking an experienced Active Directory Engineer to support an IC customer/contract in the St. Louis, MO area. Security requirements are a TS/SCI clearance and eligibility to obtain a CI polygraph. · Specific Duties and Respo ...
Voice Engineer Lead

1 day ago

Global Enterprise Services, LLC Saint Louis, United States

Job Description · Job DescriptionVoice Engineer Lead / Architect · GES is seeking a Senior Voice Engineer to identify and resolve performance issues and be responsible for all troubleshooting, repairing/replacing, configuring, monitoring and upgrading the unclassified voice archi ...
Network Engineer

3 weeks ago

Innovative Data Solutions LLC Saint Louis, United States

Job Description · Job DescriptionJob Summary · We are seeking an experienced Network Engineer to support an IC customer/contract in the St. Louis, MO area. Security requirements are a TS/SCI clearance and eligibility to obtain a CI polygraph. · Performs research, requirements an ...
Information Technology Security Analyst Senior

2 weeks ago

SSM Health St Louis, United States

It's more than a career, it's a calling. · MO-SSM Health Integrated Health Technologies · Worker Type: · Regular · Job Summary: · Provides subject matter expertise on two or more of the cybersecurity technologies. Provides maintenance, updates, and upgrades on specific technologi ...