Senior Director of Cyber Security, Punchh

• Ability to build collaborative relationships with diverse stakeholders
• Effective communicator who can coordinate, escalate, provide feedback, and ask for help
• Continuous learner, innovator, and collaborator who thrives on helping people achieve more than they thought possible – together, we win as a team!
• Bachelor’s degree in a business or technology related major
• A current industry certification such as CISSP, CCSP, CISM, MS Cybersecurity Expert, etc
• 10+ years of engineering experience in one or more domains such as security, infrastructure, IaaS/PaaS, or application development, with 5+ of those years being in a leadership role of a security team
• Hands on experience with the entire Microsoft 365 stack and Azure IaaS/PaaS
• Strong understanding of common regulations, laws, controls, and frameworks, such as SOX ITGCs, GDPR, CCPA, SOC II, NIST, PCI, ISO27001, etc

Desirable

• Reporting to the Sr. Director of IT
• Develop the cyber security vision and strategy aligned with PAR’s business objectives
• Execute the cyber security program aligned with industry best practices and regulatory requirements
• Lead, mentor and grow the cyber security team to be business focused, deeply technical, highly motivated, and productive
• Establish a risk-based control framework, enabling the company to focus on the most valuable security outcomes for the business – identify and analyze risk across business processes and assets, select controls according to risk tolerance, implement and validate selected controls, and manage residual exposure
• Oversee IT security ops, ensuring effective monitoring, detection, analysis, and response to security incidents
• Oversee vulnerability assessment and penetration testing activities to ensure robust system security and adherence to defined controls
• Partner with IA on compliance efforts for SOX ITGCs, and manage the SOC and PCI compliance activities for customer-facing product lines
• Direct a robust and ongoing corporate-wide cyber security awareness training program, including targeted training for specific team needs, and incident response tabletop exercises
• Objectively communicate progress toward defined goals and objectives by developing appropriate KPIs and related reports
• Provide quarterly reporting on the status of the cyber security program to senior business leaders and the audit committee board of directors
• Partnering closely with the legal team, serve on the compliance team as the data privacy officer
• PAR is looking for a Sr. Director of Cyber Security, reporting to the Sr. Director of IT. PAR is an international, fast-paced, high-growth environment and our tech stack is cloud and SaaS first, with a limited on-prem footprint