Sr. Director, Information Security

Join Our Team!

Sunbelt Rentals strives to be the customer's first choice in the equipment rental industry. From pumps to scaffolding to general construction tools, we aim to be the only call needed to outfit a job site with the proper equipment. Not only do we offer a vast fleet that ranks among the best in the industry, we pair it all with a friendly and knowledgeable staff. Our employees are our greatest asset, and although we present a comprehensive equipment offering, our expertise and service are what truly distinguish us from the competition.

We pride ourselves on investing in our workforce and offer competitive benefits, as well as extensive on-the-job training for all eligible employees.

As a highly successful national company, we are constantly looking for talented individuals to support our growth. If you are interested in pursuing a rewarding career, we invite you to review our opportunities!

Job Description Summary

The Sr. Director, Information Security is responsible for overseeing and directing the Sunbelt Rentals Information Security Organization. This entails helping to define the vision, establishing the framework and executing the overall framework for the information security strategy. This role serves as a thought and functional leader for established technologies as well as ahead-of-the-curve insight into emerging technologies and concepts and their impact to Sunbelt Rentals resulting in Information Security as a business enabler. The Sr. Director, Information Security, will lead, develop, and execute Information Security controls and help develop initiatives for the Sunbelt Rentals Technology ecosystem, including but not limited to compliance (e.g. PCI), cyber defense, security architecture, security measurement, incident management and security operations.

Position Responsibilities:

• Oversight of information security operations including all aspects of detect and response

• Operate and maintain incident response program

• Define and establish information security and data protection strategies and directives

• Oversight of the Information Security Governance, Risk and Compliance program including but not limited to: PCI, DFARS, CMMC, CCPA, GDPR, and other emerging regulatory or compliance initiatives

• Define, implement, maintain and enforce information security policies and procedures

• Manage a diverse team of security managers, engineers, administrators, analysts and other cross-functional professionals

• Direct and approve Security Architecture across all Sunbelt systems, in partnership with the Enterprise Architecture Council

• Institute organization-wide information security awareness, protocols and procedures

• Assess, test and select new information security solutions and technologies

• Manage 3rd party risk through customer and supplier contract review and security questionnaire baselining for risk management and compliance

• Oversight of vulnerability management and penetration tests

• Manage information security audits and measurement

• Partner with legal on privacy policy and legal discovery

• Partner with development and support teams in establishing and maintaining a secure SDLC including defining baselines and standards

• Define and administer department and project budgets

• Govern identity management practices across all systems

• Align information security practices to business requirements, goals and initiatives in partnership with enterprise business units for information security delivery and business enablement, e.g., Legal, HR, Technology, Finance, Sales, Performance Standards, and Operations

• Oversee and direct information security needs for emerging and ongoing project’s needs, e.g., business acquisitions, Greenfields, special cases as related to security management

• Communicate and deliver information security reporting and metrics to the organizational risk committee, executive leadership and cross functional team

• Act as a counsel and advisor to peers and the senior leadership for information security risk management

• Develop and Manage partner relationships in alignment with SBR strategy: including smart source planning, SOW work engagement, and cost negotiations

Requirements:

Education, Experience, Skills & Abilities:

• Bachelor’s Degree or equivalent work experience plus 15+ years in Information Security equivalent experience focusing on infrastructure, architecture, risk management and security, including 5+ years in an information technology management role, 2+ years in a director level role

• Comprehensive understanding of information security tools, vendors, and solutions

• Expert understanding of a wide variety of information security incidents related to network intrusions, web-based attacks, malicious emails, root and user level compromises, malware, botnet infections and other anomalous activity

• Enterprise level policy and procedure development and ownership

• Experienced management capabilities, proven leadership qualities and solid track record of leading multiple security disciplines and teams

• Clear track record of building and managing enterprise security programs

• Active CISSP and/or CISM Certification required

• 5+ years’ experience in ecommerce, equipment rental, retail, industrial, or commercial construction industries preferred

Physical Demands:

Must be able to bend, squat, crouch and/or reach and lift up to 25 pounds or more, as required by the job. Some Sunbelt jobs may require driving for long periods of time, loading and unloading heavy equipment, performing work in extreme weather conditions including rain, wind or excessive temperatures and/or night and weekend work. All duties must be performed according to Sunbelt’s safety policies and guidelines. Reasonable accommodations may be made to comply with ADA/ADAAA.

The above description covers the principal duties and responsibilities of the job. The description shall not, however, be construed as a complete listing of all miscellaneous, incidental or similar duties which may be required from day to day.

Sunbelt Rentals is an Equal Opportunity Employer — Minority/Female/Disabled/Veteran and any other protected ground

Starting rate of pay may vary based on factors including, but not limited to, position offered, location, education, training, and/or experience. Please visit https://www.sunbeltrentals.com/careers/ for more information on our benefits and to join our Talent Network.

Sunbelt also provides a comprehensive benefits package to its full-time employees. This package includes:

• Health, Dental and Vision plans

• 401(k) Match

• Volunteer time off

• Short-term and long-term disability

• Accident, Life and Travel insurance, as well as flexible spending

• Tuition Reimbursement Options

• Employee Assistance Program (EAP)

• Length of Service Awards

You will become eligible for benefits on the first of the month following 30 days from your start date.

Flex Time for Leaders

At Sunbelt Rentals our leaders including District Managers and above enjoy the freedom of Flex Time. It is not about tracking hours, it is about delivering great work and having the flexibility to recharge when you need it. Flex Time can be used for vacation, personal needs, or time covered by paid sick or safe leave laws. It is a simple way to balance life while keeping our business goals moving forward.

Gear up for an exciting career!

Sunbelt Rentals supports service members. Veterans encouraged to apply.