Senior Director, Offensive Security at WALGREENS
Deerfield, IL 60015
About the Job
Job Summary
Leads a team of security professionals responsible for simulating attacks to identify and exploit vulnerabilities within WBAs systems, networks and applications. Leads the design and execution of comprehensive attack scenarios, conducting penetration testing, routine vulnerability scanning, and
assessing the effectiveness of existing security measures. Partners with other information security and IT teams to ensure a holistic approach to security, as well as preparing detailed reports and recommendations to leaders to mitigate risks and strengthen defenses.
Job Responsibilities
Walgreens (www.walgreens.com) is included in the U.S. Retail Pharmacy and U.S. Healthcare segments of Walgreens Boots Alliance, Inc. (Nasdaq: WBA), an integrated healthcare, pharmacy and retail leader with a 170 year heritage of caring for communities. WBAs purpose is to create more joyful lives through better health. Operating nearly 9,000 retail locations across America, Puerto Rico and the U.S. Virgin Islands, Walgreens is proud to be a neighborhood health destination serving nearly 10 million customers each day. Walgreens pharmacists play a critical role in the U.S. healthcare system by providing a wide range of pharmacy and healthcare services, including those that drive equitable access to care for the nations medically underserved populations. To best meet the needs of customers and patients, Walgreens offers a true omnichannel experience, with fully integrated physical and digital platforms supported by the latest technology to deliver high quality products and services in communities nationwide.
The actual salary an employee can expect to receive, plus bonus pursuant to the terms of any bonus plan if applicable, will depend on experience, seniority, geographic location, and other factors permitted by law. To review benefits, please visit jobs.walgreens.com/benefits. An Equal Opportunity Employer, including disability/veterans.
Basic Qualifications
Preferred Qualifications
Leads a team of security professionals responsible for simulating attacks to identify and exploit vulnerabilities within WBAs systems, networks and applications. Leads the design and execution of comprehensive attack scenarios, conducting penetration testing, routine vulnerability scanning, and
assessing the effectiveness of existing security measures. Partners with other information security and IT teams to ensure a holistic approach to security, as well as preparing detailed reports and recommendations to leaders to mitigate risks and strengthen defenses.
Job Responsibilities
- Leads the Offensive Security (Red Team) in conducting simulated attacks of WBAs systems, networks and applications.
- Develops and maintains a clear roadmap to ensure progress against strategic and tactical initiatives and priorities . Provides regular and reoccurring updates to GCISO and CIO as required and or requested.
- Stays updated on the latest cyber threats, attack techniques, and defense strategies, providing strategic insights to enhance WBAs security posture.
- Works closely with other members of the Information Security team, ITGRC and Privacy and supports the GCISO as part of the WBA Data Security Event Process (DSEP).
- Develops, maintains and executes against an overall global Offensive Security strategy
- Develop inclusive teams in which people are empowered to succeed and partnership is encouraged. Supports a high performance culture, ensure appropriate training for engineeringstaff, provide regular communications to your team and external partners, represent the firm to outside agencies and partner companies as required
- Stay abreast of technology trends and cutting edge ideas to ensure an eye to the future. Network and maintain relationships with known industry experts and leaders
- Leverages and maintains vendor relationships strategically to compliment offensive security capabilities. Oversees the management of Service Level Agreement (SLA) and relationship with all global entities providing these services
- Develops comprehensive, accurate reports and presentations for both technical and executive level audiences.
- Leverages automation, continuously developing and maintaining a mature offensive security program. Oversees the collection, analysis, assessment, and dissemination information around the latest attack techniques and associated defensive strategies.
- Sets financial, operational and quality objectives for the unit and develops master operational plans. Plans, develops and manages departmental expense and capital budgets.
- Develops short- and long-range product and service strategies and plans. Oversees the execution of operating plans for specified area of responsibility.
- Performs as an idea generator, working with others as a thought leader and subject- matter expert to help brainstorm new processes and solutions. Shares highly complex information related to areas of expertise.
- Interacts with senior management to keep abreast of objectives. Transfers knowledge and collaborates across functional lines and/or across departments. Interacts with direct reports and peers in management / customers / vendors to interpret information and improve cross-functional processes and programs. Builds and enhances key internal and external contacts.
- Gains the respect and trust of highly technical staff. Directs through directors and managers who mentor, coach and evaluate their responsive teams and develop employees through on-boarding, open communication, training and development opportunities and performance management processes; builds and maintains employee morale and motivation; ensures the team is appropriately staffed with required competencies; fosters a diverse and inclusive workplace.
Walgreens (www.walgreens.com) is included in the U.S. Retail Pharmacy and U.S. Healthcare segments of Walgreens Boots Alliance, Inc. (Nasdaq: WBA), an integrated healthcare, pharmacy and retail leader with a 170 year heritage of caring for communities. WBAs purpose is to create more joyful lives through better health. Operating nearly 9,000 retail locations across America, Puerto Rico and the U.S. Virgin Islands, Walgreens is proud to be a neighborhood health destination serving nearly 10 million customers each day. Walgreens pharmacists play a critical role in the U.S. healthcare system by providing a wide range of pharmacy and healthcare services, including those that drive equitable access to care for the nations medically underserved populations. To best meet the needs of customers and patients, Walgreens offers a true omnichannel experience, with fully integrated physical and digital platforms supported by the latest technology to deliver high quality products and services in communities nationwide.
The actual salary an employee can expect to receive, plus bonus pursuant to the terms of any bonus plan if applicable, will depend on experience, seniority, geographic location, and other factors permitted by law. To review benefits, please visit jobs.walgreens.com/benefits. An Equal Opportunity Employer, including disability/veterans.
Basic Qualifications
- Bachelor's degree and at least 8 years of experience in IT security OR a High School Diploma/GED and at least 11 years of experience in IT security.
- At least 5 years of experience developing and implementing strategic roadmaps, goals and/or objectives.
- Experience establishing & maintaining relationships with individuals at all levels of the organization, in the business community & with vendors.
- Experience diagnosing, isolating, and resolving complex issues and recommending and implementing strategies to resolve problems.
- Experience interacting at the executive level.
- Experience developing strategic technology initiatives which align with business goals and budget.
- Experience of driving large scale, enterprise-wide transformation, including the culture and mindset of a group to embrace new and improved ways of using technology.
- At least 5 years of experience contributing to financial decisions inthe workplace.
- At least 5 years of direct leadership, indirect leadership and/or cross- functional team leadership.
- Willing to travel up to 20% of the time for business purposes (within state and out of state)
Preferred Qualifications
- Bachelors degree in computer science, Engineering, Cybersecurity or related field
- Certifications in at least one of the following - CISSP, CISM, CISA, CRISC, GPEN, CEH