Sr. Director of IT Risk Management and Physical Security

Sr. Director of IT Risk Management and Physical Security Roswell, GA, USA Job Description Vestis Corporation seeks a strategic and experienced senior leader to head its IT governance, risk, and compliance (GRC) functions and enterprise physical security program. The role establishes a robust risk‑management framework to protect digital assets, ensure regulatory compliance, and support business objectives while safeguarding company facilities, equipment, and personnel. Overview This senior enterprise leader will prepare and brief executive leadership, the Audit Committee, and the Board on technology risk, physical security posture, significant incidents, and mitigation priorities. Key Responsibilities Develop, implement, and oversee IT risk‑management policies, procedures, and controls to identify, assess, mitigate, and monitor technology‑related risks across the organization. Establish and govern the enterprise IT risk‑management program aligned to recognized frameworks, maintaining the IT risk register and translating regulatory, cybersecurity, cloud, data privacy, and emerging technology requirements into practical controls. Partner across business and technology functions to assess risks, strengthen policies and controls, and enable growth while protecting customer data, company information, and critical operations. Monitor trends identified by security operations, including vulnerability management, incident response, and threat intelligence, ensuring the confidentiality, integrity, and availability of Vestis information systems. Manage GRC initiatives, including compliance with SOX, GDPR, PCI DSS, and other relevant regulations, and conduct risk assessments. Collaborate with business leaders, IT, and compliance to align risk‑management strategies with organizational goals and drive a culture of security awareness. Oversee third‑party risk management, including vendor evaluations and ongoing monitoring. Prepare and deliver reports and presentations to executive leadership, the Audit Committee, and the Board on enterprise technology risk, physical security posture, significant incidents, investigations, crisis response, compliance status, and mitigation priorities. Stay current with emerging threats, regulatory changes, and industry best practices; recommend and implement improvements as needed. Lead the enterprise physical‑security function for company assets, providing operational controls, site‑security standards, access management, incident‑response protocols, investigative processes, crisis‑management procedures, and ongoing risk monitoring. Mentorship & Influence Mentor software, infrastructure, and data engineering teams; elevate governance, risk mitigation, and proactive security practices. Influence without authority across multiple teams to standardize IT governance practices and drive a forward‑thinking approach to IT risk management. Strategic Impact Identify and proactively address systemic security and policy risks, presenting solutions to mitigate those risks. Champion new technology solutions for IT governance, risk, security, and compliance that benefit the business while providing risk‑mitigation opportunities. Contribute to long‑term IT governance, risk, and compliance platform roadmaps, including processes that scale self‑service and decommission legacy components. Stay current with modern IT GRC practices and assess applicability to the organization. Partner with internal audit, finance, operations, product, external audit, application, data engineering, and IT teams to optimize IT GRC and security policies and practices at Vestis. Qualifications BS in Information Technology, Information Security, Accounting, Finance, or a related field; master’s degree preferred. 15+ years of progressive experience in IT risk management / GRC roles. Strong technical background and experience aligning GRC programs with frameworks such as NIST and ISO 27001. Excellent leadership, communication, and stakeholder‑management skills. Experience with data‑visualization technology for GRC metrics and dashboards (e.g., SQL, PowerBI). Required certifications: CCSP, CISSP, CISM, CRISC, CISA, CGEIT, CDPSE. This position offers the opportunity to shape Vestis Corporation’s IT risk strategy and safeguard its digital future. If you are a visionary leader with a passion for managing business risk and compliance, we invite you to apply. Equal Opportunity Employer Vestis® is an equal‑opportunity workplace and an affirmative‑action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, relationship, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities. This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor. Reasonable Accommodations Consistent with Vestis’s commitment to equal employment opportunity, we provide reasonable accommodations to qualified individuals with disabilities who need assistance in applying electronically for a position, unless doing so would impose an undue hardship. To request a reasonable accommodation, please call View phone number on click.appcast.io or email View email address on click.appcast.io. Calls for any other reason will not be returned. Accommodation requests are considered on a case‑by‑case basis. Thank you for your interest in an employment opportunity with Vestis, Canadian Linen and Québec Linge. #J-18808-Ljbffr Vestis