Director Of Information Security
Kwik Trip is seeking a strategic and execution-focused Director of Information Security to lead our enterprise cybersecurity program and help protect the systems, data, and technology services that support our coworkers, guests, and business operations. In this role, you will oversee the strategy, governance, and operational delivery of information security services while ensuring security practices align with business objectives, regulatory requirements, and evolving threats.
You will lead cross-functional teams responsible for security operations, security engineering, identity and access management, governance, risk and compliance, and security awareness initiatives. Success in this role requires balancing risk reduction, business enablement, operational excellence, and the development of high-performing teams.
Key Responsibilities:
- Lead and develop the Information Security department, including multiple teams of managers, engineers, analysts, and security professionals
- Define and execute short to mid-term 1 to 3 year cybersecurity strategies aligned with business goals and organizational risk tolerance
- Own the operational delivery of security services, ensuring capabilities are reliable, scalable, and effective
- Establish and maintain enterprise security governance, policies, standards, and procedures
- Lead security operations, incident response, vulnerability management, and threat detection programs
- Drive enterprise identity and access management strategies to protect critical business systems and data
- Oversee governance, risk management, compliance, and audit activities to support regulatory and business requirements
- Partner with technology and business leaders to integrate security into projects, platforms, and operational processes
- Lead security architecture and technology roadmaps that support secure growth and modernization efforts
- Develop and monitor security metrics, reporting, and risk indicators to support executive decision-making
- Foster a security-aware culture through training, education, and stakeholder engagement
- Partner with internal stakeholders, auditors, and external vendors to support security initiatives and compliance obligations
- Ensure security programs balance risk reduction with operational efficiency and business enablement
What You'll Bring to the Table:
- Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field
- 6 to 8 years of experience in information security, risk management, cybersecurity operations, or IT leadership
- Proven ability to lead cross-functional teams and deliver enterprise security programs
- Strong understanding of security frameworks, governance, risk management, compliance, and security operations
- Experience managing security technologies such as SIEM, endpoint protection, identity and access management, vulnerability management, and cloud security platforms
- Experience supporting regulatory and compliance initiatives such as PCI DSS, SOX, privacy regulations, or other industry requirements
- Strong communication, leadership, and strategic planning skills
- Ability to translate technical risks into business-focused decisions and recommendations
- Experience leading incident response efforts and driving continuous security improvements
- High level of integrity, confidentiality, and adaptability in a fast-paced environment
Work Schedule: Monday through Friday, daytime hours. Flexibility may be required to meet business needs. This position is based onsite at our La Crosse Support Campus.
Director Of Information Security
Kwik Trip is seeking a strategic and execution-focused Director of Information Security to lead our enterprise cybersecurity program and help protect the systems, data, and technology services that support our coworkers, guests, and business operations. In this role, you will oversee the strategy, governance, and operational delivery of information security services while ensuring security practices align with business objectives, regulatory requirements, and evolving threats.
You will lead cross-functional teams responsible for security operations, security engineering, identity and access management, governance, risk and compliance, and security awareness initiatives. Success in this role requires balancing risk reduction, business enablement, operational excellence, and the development of high-performing teams.
Key Responsibilities:
- Lead and develop the Information Security department, including multiple teams of managers, engineers, analysts, and security professionals
- Define and execute short to mid-term 1 to 3 year cybersecurity strategies aligned with business goals and organizational risk tolerance
- Own the operational delivery of security services, ensuring capabilities are reliable, scalable, and effective
- Establish and maintain enterprise security governance, policies, standards, and procedures
- Lead security operations, incident response, vulnerability management, and threat detection programs
- Drive enterprise identity and access management strategies to protect critical business systems and data
- Oversee governance, risk management, compliance, and audit activities to support regulatory and business requirements
- Partner with technology and business leaders to integrate security into projects, platforms, and operational processes
- Lead security architecture and technology roadmaps that support secure growth and modernization efforts
- Develop and monitor security metrics, reporting, and risk indicators to support executive decision-making
- Foster a security-aware culture through training, education, and stakeholder engagement
- Partner with internal stakeholders, auditors, and external vendors to support security initiatives and compliance obligations
- Ensure security programs balance risk reduction with operational efficiency and business enablement
What You'll Bring to the Table:
- Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field
- 6 to 8 years of experience in information security, risk management, cybersecurity operations, or IT leadership
- Proven ability to lead cross-functional teams and deliver enterprise security programs
- Strong understanding of security frameworks, governance, risk management, compliance, and security operations
- Experience managing security technologies such as SIEM, endpoint protection, identity and access management, vulnerability management, and cloud security platforms
- Experience supporting regulatory and compliance initiatives such as PCI DSS, SOX, privacy regulations, or other industry requirements
- Strong communication, leadership, and strategic planning skills
- Ability to translate technical risks into business-focused decisions and recommendations
- Experience leading incident response efforts and driving continuous security improvements
- High level of integrity, confidentiality, and adaptability in a fast-paced environment
Work Schedule: Monday through Friday, daytime hours. Flexibility may be required to meet business needs. This position is based onsite at our La Crosse Support Campus.
