Director of Information Security

Srm Concrete

Provides ready-mix concrete for residential, commercial, and infrastructure projects.

Leads SRM's enterprise cybersecurity strategy, governance, risk, and operations across hybrid clouds.

7 days ago ago

Expert & Leadership (13+ years)

Full Time

Smyrna, TN

Office Full-Time

Company Size

4,000 Employees

Service Specialisms

Ready Mix Concrete

Construction Services

Sector Specialisms

Commercial

Industrial

Energy

Infrastructure

Residential

Role

What you would be doing

security strategy

risk management

incident response

iam strategy

vulnerability management

security architecture

Develop security strategies for operational technology (OT) and industrial IoT environments, including plant networks, weigh systems, and telemetry.
Design and oversee the implementation of security controls across network, system, application, and cloud infrastructures (Azure, OCI, O365).
Establish and oversee third-party and supply-chain risk management processes, ensuring that vendor systems and services meet SRM’s security and privacy requirements.
Oversee enterprise security operations and incident response, leveraging SIEM, threat intelligence, and analytics to detect and mitigate risks, while leading disaster recovery planning, simulation exercises, periodic threat assessments and penetration testing, and post-incident reviews to strengthen organizational resilience.
Partner with CIO and IT Leadership, along with Legal and HR teams to ensure adherence to evolving data privacy and regulatory requirements.
The Director of Information Security is responsible for the full lifecycle of SRM’s cybersecurity program — from strategic planning and design through implementation, monitoring, and continuous improvement.
Develop and manage enterprise-wide security awareness and training programs to promote a strong security culture.
Oversee identity and access management (IAM) strategy, ensuring proper integration with Microsoft Entra ID (Azure AD), Active Directory, and role-based access controls, as well as other identity strategies to be evaluated and implemented.
Manage risk assessments, vulnerability management, and remediation activities, prioritizing mitigation efforts based on business impact.
Lead and mentor the information security team, fostering a culture of collaboration, accountability, and ongoing professional development.
Coordinate audits and compliance efforts related to security, privacy, and data protection (SOX, PCI, GDPR, etc. as applicable).
Establish and maintain cybersecurity policies, standards, and procedures in alignment with industry best practices (NIST, CIS, ISO 27001).
Evaluate emerging threats and technologies, recommending appropriate security solutions and investments.
Collaborate with IT leadership to integrate security into all technology projects, ensuring secure design, configuration, and deployment practices.
Develop and execute SRM’s enterprise-wide information security strategy, roadmap, and governance framework, ensuring consistent control design, secure system integration, and architectural alignment with Zero Trust principles.
Define and track risk metrics on key cybersecurity performance indicators (KPIs) including health, incidents, and strategic initiatives and provide executive reports to CIO and IT leadership regularly and C-suite as needed.
Collaborate across IT disciplines (systems, networking, applications) to ensure end-to-end resilience, visibility, and alignment of security priorities with operational needs.

What you bring

nist

iso 27001

siem

zero trust