Chief Information Security Officer

We are Subway Headquarters! A dedicated team of professionals supporting thousands of franchisees around the globe.

Position Title - Chief Information Security Officer

Region : Shelton, CT

Ready for a fresh, new career? Look no further because one of the world's most iconic brands can help you get there.

Why Join Us?

At Subway, "better" is baked into our DNA. We are a brand that believes in continued improvement ... in our lives, our businesses, and our planet. From the handshake that started our very first sandwich shop to earning our position as one of the world's leading restaurant brands, we've always embraced change and the path ahead. And today, we're making better living way easier.

Our purpose is more than the food we serve in our restaurants. It's centered on fueling healthy businesses and healthier lives. It is one of the most exciting times to join the Subway team and contribute to our transformational journey.

About the Role :

The Chief Information Security Officer is responsible for leading the organization's cybersecurity strategy and operations. This role is focused on protecting company data, systems, and networks from cyber threats, ensuring the confidentiality, integrity, and availability of critical information assets. The CISO develops and implements cybersecurity policies, technologies, and incident response plans to defend against evolving threats and vulnerabilities and drives continuous improvement in the organization's cyber defense posture.

Responsibilities :

• Develop and implement a comprehensive cybersecurity strategy aligned with the organization's business goals, focusing on the protection of data, systems, and networks.
• Establish and enforce information security policies, standards, and procedures to ensure compliance with relevant laws, regulations, and industry best practices.
• Develop and oversee incident response plans for operational risks.
• Oversee incident response plans to effectively address and mitigate the impact of security incidents.
• Oversee the monitoring of networks and systems for security breaches, vulnerabilities, and suspicious activity; coordinate rapid response to cyber incidents.
• Continuously assess and prioritize cybersecurity risks, considering emerging threats, vulnerabilities, and technology trends.
• Select and implement appropriate security controls and technologies to defend against cyber threats.
• Regularly report on the organization's information security risk posture to executive leadership and relevant stakeholders. Collaborate with IT and business leaders to integrate cybersecurity considerations into technology projects and business processes
• Manage third-party risk as it relates to cybersecurity, ensuring vendors and partners adhere to company security standards.
• Foster an information security aware culture by promoting best practices and proactive security / risk management behaviors.
• Develop and deliver training programs to enhance operational information security awareness across the organization. Implement programs to raise awareness of information security risks among employees and stakeholders.
• Ability to align cybersecurity with business objectives.
• Deep expertise in cybersecurity technologies, threat intelligence, and incident response.
• Strong understanding of network, system, and application security
• Experience with security operations centers (SOC), vulnerability management, and penetration testing.
• Leadership and team management skills.
• In-depth knowledge of cybersecurity technologies and trends.
• Leadership and team management capabilities.
• Knowledge of relevant regulatory requirements and industry best practices. (e.g., NIST, ISO 27001, GDPR).
• Strong knowledge of industry regulations, standards, and best practices.

Qualifications :

What do we Offer?

Actual pay is determined based on several job-related factors including skills, education, training, credentials, qualifications, scope and complexity of role responsibilities, geographic location, performance, and working conditions.

The Company is only considering applicants who are currently authorized to work in the country the position is based. AA / EOE / D / V