Portland Senior Manager Information Security OR

Job description

Purpose & Overall Relevance for the Organization: Responsible for leading the North America Cyber Defense capability, protecting adidas from cyber threats through proactive prevention, continuous monitoring, incident response, threat intelligence, vulnerability management, and security operations. Key Responsibilities: Oversee continuous monitoring of security events and threat activity. Improve detection capabilities through SIEM, EDR, cloud security, and automation platforms. Define and track operational security KPIs and service metrics. Reduce mean time to detect (MTTD) and mean time to respond (MTTR). Act as regional cyber incident commander during significant security events. Lead investigation, containment, eradication, and recovery efforts. Coordinate response activities across technology, legal, communications, privacy, and business teams. Facilitate executive briefings during security incidents. Conduct post-incident reviews and lessons learned activities Develop regional threat intelligence capabilities. Monitor emerging threats affecting retail, eCommerce, supply chain, and corporate environments. Leverage intelligence to improve preventive controls and detection engineering. Partner with global teams on threat hunting initiatives and adversary tracking. Information security Provides advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards. Obtains and acts on vulnerability information and conducts security risk assessments, business impact analysis and accreditation on complex information systems. Investigates major breaches of security, and recommends appropriate control improvements. Contributes to development of information security policy, standards and guidelines. Specialist advice Actively maintains recognized expert level knowledge in one or more identifiable specialisms. Provides definitive and expert advice in their specialist area(s). Oversees the provision of specialist advice by others, consolidates expertise from multiple sources, including third party experts, to provide coherent advice to further organizational objectives. Supports and promotes the development and sharing of specialist knowledge within the organization. Research Within given research goals, builds on and refines appropriate outline ideas for research, including evaluation, development, demonstration and implementation. Applies standard methods to collect and analyze quantitative and qualitative data. Creates research reports to communicate research methodology and findings and conclusions. Contributes sections of material of publication quality. Uses available resources to update knowledge of any relevant field and curate a personal collection of relevant material. Participates in research communities. Emerging technology monitoring Supports monitoring of the external environment and assessment of emerging technologies to evaluate the potential impacts, threats, and opportunities to the organization. Contributes to the creation of reports, technology road mapping and the sharing of knowledge and insights. Security administration Maintains security administration processes and checks that all requests for support are dealt with according to agreed procedures. Provides guidance in defining access rights and privileges. Investigates security breaches in accordance with established procedures and recommends required actions and supports / follows up to ensure these are implemented. Digital Forensic Contributes to digital forensic investigations. Processes and analyses evidence in line with policy, standards and guidelines and supports production of forensics findings and reports. Penetration testing Maintains current knowledge of malware attacks, and other cyber security threats. Creates test cases using in-depth technical analysis of risks and typical vulnerabilities. Produces test scripts, materials and test packs to test new and existing software or services. Specifies requirements for environment, data, resources and tools. Interprets, executes and documents complex test scripts using agreed methods and standards. Records and analyses actions and results. Reviews test results and modifies tests if necessary. Provides reports on progress, anomalies, risks and issues associated with the overall project. Reports on system quality and collects metrics on test cases. Provides specialist advice to support others. Relationship management Implements stakeholder engagement/communications plan. Deals with problems and issues, managing resolutions, corrective actions, lessons learned and the collection and dissemination of relevant information. Collects and uses feedback from customers and stakeholders to help measure effectiveness of stakeholder management. Helps develop and enhance customer and stakeholder relationships. If required: People Management / Resource Management: Is involved in recruiting process and proposes support for hiring decision and pre-selection of candidates Allocates the different work to the respective employees considering experience, complexity, workload and organizational efficiency Continuously monitors and evaluates team workload and organizational efficiency with the support of IT systems, data and analysis and team feedback and makes appropriate changes to meet business needs. Provides team members/direct reports with clear direction and targets that are aligned with business needs and GIT objectives Key Relationships: Global IT Respective business function (GOPS, Finance, HR, Brand Marketing, Wholesale/Retail) HR Management Controlling Requisite Education and Experience / Minimum Qualifications : Four-year college or university degree with focus on Business Administration or IT or related areas, or equivalent combination of education and experience Proficient spoken and written command of English At least 7-year experience in IT 5 years of experience in relevant area 2 years of experience in team management Strong understanding & knowledge of regional and global market landscape and the respective customer Managed critical elements and cross functional and regional projects At adidas we offer a Hybrid work policy which requires attendance in the office Monday through Thursday, with the flexibility to work remotely on Friday each week. For work requiring a high degree of collaboration or an in-person presentation, in-office attendance is required even on Friday. adidas celebrates diversity, supports inclusiveness and encourages individual expression in our workplace. We actively encourage individuals with disabilities to apply and will provide reasonable accommodations throughout the recruitment process. We do not tolerate the harassment or discrimination toward any of our applicants or employees. We are an Equal Opportunity Employer. adidas offers robust and progressive medical, including HSA (Health Savings Account) with employer funding or FSA (Flexible Spending Account) options, dental, vision, prescription drug coverage, adoption, with surrogate and fertility support, short and long-term disability, and basic life and AD&D insurance. Employees are able to enroll in adidas’ 401k plan and Stock Purchase Plan with employer match. Full-time employees are eligible for education assistance and generous Leave policies including 14 weeks of paid parental leave. ​ Employees are eligible to earn an annual bonus based on company performance. Employees accrue prorated flexible time off in the amount .4388 hours per day that increases with years of service, twelve paid holidays throughout the calendar year and Service Time Off during milestone years. ​ At adidas we offer a Hybrid work policy which requires attendance in the office Monday through Thursday, with the flexibility to work remotely on Friday each week. For work requiring a high degree of collaboration or an in-person presentation, in-office attendance is required even on Friday. The working location of this position is Po