Information Technology Security Manager

Summary

The IT Security Manager is responsible for leading the development and execution of the brand’s cybersecurity strategy, ensuring scalable and resilient protection across our fast-growing enterprise. This role will design, implement, and manage comprehensive security frameworks and programs that support both cloud (AWS) and on-premises environments.

All potential candidates should read through the following details of this job with care before making an application.

This role will provide strategic and operational leadership in safeguarding brand systems, guest data, and digital assets - critical to supporting our store operations, franchise partners, and guests. The position requires strong leadership capabilities and deep expertise in modern security practices, regulatory compliance, risk management, and Agile methodologies. The Manager will work closely with IT, cross-functional business stakeholders, and external partners to maintain a proactive, business-aligned cybersecurity posture that supports innovation, compliance, and guest trust.

Essential Functions

• Develop, implement, and manage the brand’s information security strategy, policies, standards, and procedures.
• Lead security initiatives across cloud (AWS and Azure) and on-premises environments, ensuring alignment with business objectives and industry best practices.
• Manage security monitoring solutions and incident response processes to quickly identify, mitigate, and remediate security threats.
• Coordinate regular security audits, penetration testing, and vulnerability assessments to proactively manage and mitigate risks.
• Oversee compliance efforts, including PCI DSS, GDPR, and other applicable regulations.
• Collaborate with infrastructure and application teams to embed security controls into all aspects of technology operations and software development lifecycles.
• Lead cybersecurity training and awareness initiatives across the organization to foster a culture of security awareness and compliance.
• Develop and implement third-party risk management processes to assess and mitigate risks from vendors and partners.
• Establish key performance indicators (KPIs) and regularly report on the effectiveness of security measures to senior leadership.
• Utilize Agile methodologies to prioritize and manage security projects, ensuring timely and effective delivery.
• Manage the security budget effectively, optimizing investments to achieve maximum impact and protection.
• Mentor team members, fostering professional growth, collaboration, and a high-performance security culture.
• Stay informed about the latest cybersecurity trends and continuously refine strategies and processes to enhance security posture.

Experience and Skill Requirements

Qualifications

Relevant security certifications are highly preferred, including but not limited to :