It Director, Information Security Engineering

Job Description

The Director of Information Security Engineering is a senior cybersecurity leader responsible for the architecture, engineering, and operational effectiveness of the organization's security technologies and controls.

This role leads multiple security disciplines, including Identity & Access Management (IAM), Network and Endpoint Security, SAP Security, Security Architecture, and Application & Data Security.

The Director will partner with the Director of Information Security Operations to ensure the overall security of AutoZone systems and data.

The successful candidate must possess significant experience in a dedicated Information Security leadership role

Responsibilities

Security Engineering Leadership
• Develop and execute the enterprise security engineering strategy aligned with organizational objectives and cybersecurity risk management priorities.
• Lead, mentor, and develop high-performing teams across multiple security disciplines.
• Establish security standards, policies, and engineering practices that support a secure-by-design culture.

Security Architecture
• Establish and maintain enterprise security architecture standards and frameworks.
• Provide strategic guidance on emerging technologies and their associated security risks.

• Ensure security requirements are embedded throughout the technology lifecycle.

Identity & Access Management (IAM)
• Provide strategic leadership for identity governance, privileged access management, authentication, authorization, and access certification programs.
• Ensure effective lifecycle management of user, service, and privileged accounts.
• Lead the adoption and enhancement of modern identity technologies, including multi-factor authentication, single sign-on, and zero trust principles.

Network and Endpoint Security
• Direct the design, implementation, and operation of enterprise network security controls.
• Oversee firewalls, network segmentation, secure remote access, intrusion detection/prevention, endpoint protection, and vulnerability management technologies.
• Ensure effective monitoring, hardening, and protection of endpoint devices across the enterprise.

SAP Security
• Lead SAP security governance, architecture, and administration.
• Ensure appropriate segregation of duties (SoD), role-based access controls, and compliance requirements are maintained.
• Partner with business and ERP teams to support secure SAP implementations, upgrades, and transformations.

Application and Data Security
• Lead application security programs, including secure software development practices, threat modeling, code review, and security testing.
• Establish security requirements for internally developed and third-party applications.
• Develop and maintain data protection strategies including data classification, encryption, key management, and data loss prevention.
• Partner with development, infrastructure, and data teams to implement security contr...