Log In
Sign Up
Software & Technology
Dutch Bros Hiring for Director of Information Security Job at Oregon Full Time
br{display:none;}.css-58vpdc ul > li{margin-left:0;}.css-58vpdc li{padding:0;}]]>
It’s fun to work in a company where people truly believe in what they are doing. At Dutch Bros Coffee, we are more than just a coffee company. We are a fun-loving, mind-blowing company that makes a difference one cup at a time.
Being part of the Dutch Family
You are adaptable, a servant leader, and community-minded. You view yourself as an unfinished product on the constant pursuit of personal and professional development. We rely on our people to uphold our core values of speed, quality, and service to protect our culture and ensure our growth remains limitless!
Dutch Bros mission statement
We are a fun-loving, mind-blowing company that makes a massive difference one cup at a time.
Who we are
Dutch Bros puts people first in everything we do. Joining our team gives you the opportunity to build a compelling future while making a massive difference in the lives of our customers and communities.
We love people and we love OUR people! Here’s what we offer
Here at Dutch Bros, we want our employees to feel valued, and we recognize there’s more to value than a salary. The following benefits and perks were hand-picked to cater to our diverse employee base:
- Medical/Dental/Vision/Short Term Disability/Life insurances
- Paid Sick Days
- 401(k) plan with employer match after one year of employment
- Education Benefit Program
- Vacation/Floating Holidays/Paid Time Off
- Paid Parental Leave
- Flexible Schedule
- Paid Volunteer Days
- Various employee discounts
- Office perks, such as hi-lo desks, snacks provided daily, casual dress code, and an in-house coffee bar with a dedicated Broista
Position Overview
The Director of Information Security is responsible for developing the team and program that executes strategic objectives that facilitate agile business growth, while ensuring we continuously improve our strong and resilient security posture and culture. This role will partner with, and support, a wide variety of business leaders to provide security governance requirements, drive compliance and reduce security risk to the business.
Key Result Areas (KRAs)
Manage and develop the infosec program by implementing best practices throughout the various technologies across Dutch Bros to identify and reduce risk to acceptable levels:
- Ensure the infosec team is at the forefront of security incidents (phishing, DDOS, malware, etc.) and adequately triage within other technical teams
- Engage and debrief IT leadership on cybersecurity matters related to the company, including reporting on industry trends and best practices.
- Remain current on industry trends, direction, opportunities, and applicability of Dutch Bros.
- Manage and lead the collection of audit and assessment-related evidence gathering.
- Author design, implementation, and maintenance of Dutch Bros security plan, policies, procedures, and standards.
- Understand the department’s role in the overall company strategy and set objectives that are aligned with this role.
- Assist defining the overall strategic direction and business contribution of the department.
- Monitor the direction and growth of the business to ensure the application of appropriate technologies and support resources.
Drive infosec within Dutch Bros to align with cultural values while collaborating with other teams and vendors to deliver superior performance standards and policies for compliance:
- Develop programs and awareness to improve CCPA, GDPR, PCI, SOX processes.
- Develop and deliver a framework based for assessing vendor risk.
- Act as the ambassador for the third-party risk program, integrating departments into the evaluation and decision-making processes.
- Partner with Legal to align contractual language with any inherent risk.
- Work with the broader risk teams on Cyber Insurance renewal process.
- Foster a culture of Privacy by Design.
- Map regulated data lifecycle from collection to destruction.
- Ensure appropriate protections and controls are in place for data elements.
- Determine appropriate tools to automate and streamline processes where possible.
- Collaborate with other departments to identify and reduce risk while ensuring company practices are in compliance where relevant.
Support the growth of the infosec team while operationalizing cybersecurity initiatives to highlight improvements in posture:
- Evangelize scorecards against NIST and CIS standards to track improvement of security hygiene across the business.
- Foster team mentality centered around business benefits from security initiatives.
- Actively participate in hiring processes and onboarding of new employees and vendors.
- Plan, assign and support workloads for direct reports.
- Grow and mentor security talent.
- Set reasonable stretch performance goals, provide balanced, regular performance feedback, and conduct tri-annual performance reviews.
- Recognize and reward performance excellence.
- Provide leadership, direction and training to improve the information security awareness.
Job Qualifications
- Bachelor’s degree (BA/BS) in a related discipline, or 4 additional years of related experience, required.
- Minimum of 6 years of experience in infosec roles that provide a background in IT areas such as software development, infrastructure, operations, and incident response, required.
- Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) Certification, preferred.
- Demonstrated management skills, e.g., budget development and administration, policy development and implementation, personnel administration, and staff training and development.
- Experience enforcing policies and procedures to safeguard the Confidentiality, Integrity, and Availability of sensitive information.
- Thorough understanding of SOX, CCPA, PCI, NIST, CIS18.
- Previous experience in SaaS heavy environments and vendor management.
- Previous experience implementing security programs.
- Strong experience building and mentoring teams.
- Previous experience using a SIEM to analyze and correlate activity.
- Knowledge of Active Directory
- Previous experience identifying indicators of compromise and managing response standards..
- Knowledgeable in security technologies, procedures, and best practices to include functions such as Web Application Firewalls, Intrusion Detection Systems, File Integrity Monitoring, SIEM, and Vulnerability Scanning
Competencies
- Change Management
- Budgetary Responsibility
- Business Plan Development
- Collaborative
- Communication
- Critical Problem Solving
- Delegation
Physical Requirements
- Occasional lifting up to ten pounds
- Must be able to work in a climate-controlled office environment
- Vision must be good, or corrected to normal, to perform normal job duties
- Hearing must be good, or corrected to normal, to have the ability to understand information to perform job duties
- Ability to read and write in English in order to process paperwork and follow up on any actions necessary
- Sitting for extended periods of time
- Manual dexterity needed for keyboarding and other repetitive tasks
- This position is eligible for remote work within any state Dutch Bros currently resides
Compensation:
$148,9552.41 – $172,676.67
If you like wild growth and working in a unique and fun environment, surrounded by positive community, you’ll enjoy your career with us!
