Director of Cyber Security (HYBRID) Bolingbrook - IL

WHY JOIN?Be part of something special – a place where work feels like a community, not just a job. We're a vibrant and innovative crew united by a shared passion for creativity, growth, and collaboration.S&S is expanding, and we want to connect with dedicated individuals to join our team and create a best place to work. Our team is driven by innovation and partnership, where your ideas are heard and celebrated. We're building an inclusive environment that values every voice and fosters a culture of mutual support and respect.If you're ready to dive into a dynamic work environment where every day brings new personal and professional growth opportunities, apply today!We'd love to hear from you if you're enthusiastic about being part of a company that values its employees and rewards hard work. Take the next step in your career with us, where you're not just an employee but an essential part of our journey toward success. APPLY NOW, and let's grow together!WE OFFERIncredible team spirit – At the heart of our success is a culture that cherishes teamwork. We thrive on collaboration and value feedback and innovative thinking.Opportunities for professional growth – Your contributions are integral to our growth. As we expand, so do your career opportunities to develop and advance.Exclusive apparel discounts – Ready to upgrade your wardrobe?! As part of S&S, you'll enjoy special discounts on our trendy, high-quality apparel. Stay stylish and save big!Top-notch employee benefits – We prioritize the health and well-being of our team members with an extensive benefits package, including health, dental, and vision coverage, along with retirement planning options.Fun employee appreciation events – We love celebrating you! Regular events are our way of saying 'thank you' for your hard work and dedication. Prepare for some memorable moments of appreciation and fun.State-of-the-art equipment – Experience the best in technology and equipment. We provide cutting-edge resources to make your work life safe and efficient!About the RoleWe are seeking a seasoned Chief Information Security & Privacy Officer (CISO/CPO) responsible for leading our enterprise-wide cybersecurity, data protection, and privacy programs. This role ensures the security of systems supporting high-volume B2B operations, including eCommerce platforms, ERP systems, technology integrations, and warehouse/logistics technologies- while establishing a practical, scalable privacy framework.This leader will balance risk management with operational speed, enabling sales, fulfillment, and customer experience teams to move quickly while protecting sensitive customer, vendor, and employee data. This role is responsible for owning and advancing the company’s cybersecurity and data privacy programs through the next stage of maturity while enabling growth, innovation, and customer trust.The role leads security strategy, architecture, and program execution across the enterprise, ensuring controls and practices are appropriately designed, implemented, and maintained. While audit and regulatory requirements (PCI, SOX, U.S. data privacy laws, and potential future SOC 2) are important inputs, the roles success is defined by durable risk reduction, effective enablement of the business, and the establishment of clear, scalable security operating models.COMPENSATION & SCHEDULEPay Range: $210,000.00 - $220,000.00 with bonus potentialMonday - Friday, Exempt, Full-TimeHybrid schedule (220, Remington Blvd, Bolingbrook, IL)WHAT YOU WILL DO(Shared)Program Ownership and StrategyOwn the cybersecurity roadmap and guide the programs evolution over multiple yearsTranslate business objectives and technology strategy into pragmatic security prioritiesBalance risk reduction, operational efficiency, and business agility in decision-makingEstablish and mature governance processes that are practical, scalable, and well‑integrated into how the company operatesSecurity Architecture and StandardsDefine and maintain security architecture principles and standards across on‑prem, cloud, SaaS, and internally developed platforms (including the company’s ERP)Drive consistent control design rather than one‑off solutionsEnsure security is embedded early in technology and application decisionsPrivacy Leadership (Chief Privacy Officer Functions)In collaboration with the legal department, manage and advance the company’s data privacy program through its next level of maturityServe as the organizations Data Protection OfficerEnsure proper data governance, classification, retention, and protection practicesMaintain a data inventory and data mapping of customer, vendor, employee, and logistics data flowsLead privacy impact assessments (PIAs/DPIAs) and embed privacy-by-design into systems and processesManage data subject rights processes (access, deletion, correction requests)Oversee privacy practices related to employee data, including recruiting, payroll, benefits, and performance managementEnsure compliance with applicable employment-related privacy obligationsProvide guidance on monitoring technologies and workplace data, use Monitor evolving privacy regulations and assess impact on business operationsRisk Management and Incident ResponseLead security operations including threat detection, vulnerability management, endpoint security, and incident responseOwn the incident response program and serve as incident lead during security eventsOversee breach notification processes in coordination with legal and communicationsBuild repeatable, well-understood response processes rather than ad hoc executionConduct post-incident reviews and implement continuous improvementsOwn Cyber Insurance ProgramProvide regular reporting to executive leadership on cyber risk posture, incidents, and remediation effortsAI Security and Emerging Technology GovernancePartner with technology, legal, data, and business leaders to define a practical AI security and risk management approachEstablish guardrails for the secure use of AI capabilities, including internally developed solutions and third‑party AI featuresIdentify and manage risks related to data exposure, model misuse, access control, and integrityDefine policies and controls to enable responsible AI adoption to enable the business to deliver best in class solutions for our customersEvolve AI security practices as usage matures, focusing on sustainability rather than one‑time controlsCompliance and Audit EnablementPartner with IT, Legal, Compliance, and Finance to support PCI, SOX, and future assurance activities as well as regulatory inquiries and investigationsDesign controls that are operationally maintainable, not audit‑onlyPromote calm, repeatable audit readiness rather than reactive compliance exercisesOwn and enforce maintenance and testing of business continuity and disaster recovery plansTeam Leadership and Capability BuildingLead and develop the internal security team across engineering, privacy, and compliance functionsSet clear expectations, priorities, and development pathsMake thoughtful, defensible cases for team growth or external augmentation when warrantedGovernance & Cross-Functional LeadershipEstablish strong security and privacy governance frameworksCollaborate with product, engineering, and business teams to enable secure and privacy-conscious innovationLead security awareness and privacy training programs and policies across the organizationManage third-party/vendor risk, including security and privacy assessmentsStakeholder EngagementServe as the primary security partner to IT leadership and senior engineering leadersCommunicate security risks and tradeoffs in clear business termsBuild trust and alignment rather than relying on escalation or authority aloneWHAT WE’RE LOOKING FOR10+ years of experience in cybersecurity, including leadership of multi‑disciplinary programs with significant exposure to data privacyExperience as a CISO, Head of Security, or equivalent executive roleProven ability to design and run durable security operating modelsStrong knowledge of security frameworks (NIST, ISO 27001, CIS) and privacy laws (PIPEDA, CCPA/CPRA etc.)Experience leading incident response and breach managementExperience operating in regulated, growth‑oriented environmentsComfortable representing complex security perspectives to senior leadership and external stakeholdersStrong judgment in balancing risk, cost, and long‑term sustainabilityExperience in cloud security (AWS, Azure, GCP) and modern architectureMaintain at least one cyber security certification (i.e. CISSP, CISA, CISM)Success MeasuresSecurity and privacy program maturity progresses in a measurable, sustainable waySecurity architecture and standards are consistently appliedIncidents are handled effectively, calmly, and with clear ownershipAdoption of security and privacy best practices across the businessAudit and regulatory obligations are met without overstretching the organizationSecurity and privacy team is viewed as a credible, enabling partner across the businessLong‑Term ExpectationsExpand strategic influence as the business growsContinuously adapt the security program to new technologies and risksMaintain focus on durable outcomes rather than short‑term checklistsPhysical DemandsThe physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to talk or listen.Working EnvironmentCurrently, S&S has a remote work policy which provides for employees to be in the office Mondays, Wednesdays and Fridays and work from home on Tuesdays and Thursdays, which is subject to change based on business need. Position location: Bolingbrook, IL.This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines. Reasonable accommodation may be made to enable people with disabilities to perform the essential functions.S&S Activewear welcomes people of all backgrounds and experiences and are committed to creating a diverse culture and supporting human growth. We are proud to be an equal opportunity employer and are committed to providing equal opportunity for all employees and applicants. We conduct business without regard to sex, race, creed, color, religion, marital status, national origin, citizenship status, age, pregnancy, sexual orientation, gender identity or expression, genetic information, disability, military status, status as a veteran, or any other protected characteristic. Our policy is to recruit, hire, train, promote, assign, transfer, and terminate employees based on their own ability, achievement, experience and conduct and other legitimate business reasons. S&S participates in E-Verify and will provide the federal government with your Form I-9 information to confirm you are authorized to work in the U.S. This job offer is contingent upon the completion of a satisfactory background check.EQUAL OPPORTUNITY EMPLOYERS&S Activewear welcomes people of all backgrounds and experiences and are committed to creating a diverse culture and supporting human growth. We are proud to be an equal opportunity employer and is committed to providing equal opportunity for all employees and applicants. We conduct business without regard to sex, race, creed, color, religion, marital status, national origin, citizenship status, age, pregnancy, sexual orientation, gender identity or expression, genetic information, disability, military status, status as a veteran, or any other protected characteristic. Our policy is to recruit, hire, train, promote, assign, transfer, and terminate employees based on their own ability, achievement, experience and conduct and other legitimate business reasons. S&S participates in E-Verify and will provide the federal government with your Form I-9 information to confirm you are authorized to work in the U.S. This job offer is contingent upon the completion of a satisfactory background check. #J-18808-Ljbffr