Director Security Operations

Job Purpose

Provide strategic leadership and oversight for Panera’s Security Operations function, ensuring the confidentiality, integrity, and availability of enterprise systems and data. Drive the development and execution of security operations strategies, threat management programs, and incident response capabilities to protect Panera’s digital ecosystem. Serve as a key advisor on security posture and risk mitigation to third party SOC solutions.

Duties & Responsibilities

The primary responsibilities of this job include, but are not limited to:

• Define and execute the vision and roadmap for Security Operations, aligning with enterprise security strategy and business objectives.
• Lead and mentor a team of security analysts and engineers, fostering a culture of accountability, innovation, and continuous improvement.
• Establish KPIs and metrics to measure operational effectiveness and report progress to leadership.
• Oversee advanced threat detection, monitoring, and response capabilities across Panera’s digital and internal assets.
• Serve as the escalation point for major security incidents, ensuring timely containment, remediation, and communication.
• Implement and optimize internal and external Security Operations Center (SOC) processes, leveraging automation and orchestration tools (SIEM, SOAR, EDR).
• Drive vulnerability management programs and coordinate remediation efforts across technology teams.
• Partner with Security Engineering, IT, and business units to integrate security into technology initiatives and operational workflows.
• Act as an escalation with legal, compliance, and audit teams for investigations, litigation holds, and regulatory inquiries.
• Champion security awareness programs and briefings on emerging threats and risk trends.
• Represent Panera in external security forums, industry groups, and vendor partnerships.

Qualifications (Education & Experience)

Qualifications include:

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 10 years of progressive experience in information security, with at least 5 years in leadership roles.
• Proven expertise in Security Operations, threat management, and incident response at enterprise scale.
• Strong knowledge of security frameworks (NIST, ISO 27001), risk assessment methodologies, and regulatory compliance.
• Experience managing SOC operations and implementing advanced security technologies (SIEM, SOAR, EDR, threat intelligence platforms).
• Exceptional communication and leadership skills, with the ability to influence at all organizational levels.
• Relevant certifications (CISSP, CISM, GIAC) strongly preferred. Practical experience with PC, Server and LAN Security.
• Strong understanding of Security Architecture and Design, Information Security Standards and Technical Security Risk Assessment methodologies
• Demonstrated experience in managing incident response and in working with internal and external parties on problem resolution.

Working Conditions

• Minimal travel required
• Remote work is possible

Physical Requirements

• Standard office environment; ability to use computer and communication tools effectively.

Direct Reports

• This position will have 4 direct reports

Equal Opportunity Employer: Disabled/Veterans

The compensation range for this position is $207,723-$290,812. The actual pay offered will be determined by multiple factors, including but not limited to the candidate’s relevant experience, job-related knowledge, skills, and geographical location. Individual compensation decisions are dependent upon the facts and circumstances of each position and candidate.