Senior Manager, Information Security

Leads the North America Cyber Defence capability, protecting adidas from cyber threats through proactive prevention, continuous monitoring, incident response, threat intelligence, vulnerability management and security operations. It sits within the Technology team and works closely with Global IT and cross-functional business partners such as GOPS, Finance, HR, Brand Marketing and Wholesale/Retail. The position combines regional incident command, detection and response improvement, threat intelligence development and specialist security advice, with people management responsibilities where required.

• Oversee continuous monitoring of security events and threat activity, and improve detection capabilities through SIEM, EDR, cloud security and automation platforms.
• Define and track operational security KPIs and service metrics, and reduce mean time to detect (MTTD) and mean time to respond (MTTR).
• Act as regional cyber incident commander during significant security events, leading investigation, containment, eradication and recovery efforts.
• Coordinate response activities across technology, legal, communications, privacy and business teams, and facilitate executive briefings during security incidents.
• Conduct post-incident reviews and lessons learned activities.
• Develop regional threat intelligence capabilities and monitor emerging threats affecting retail, eCommerce, supply chain and corporate environments.
• Leverage threat intelligence to improve preventive controls and detection engineering, and partner with global teams on threat hunting initiatives and adversary tracking.
• Provide advice and guidance on security strategies to manage identified risks and ensure adoption of and adherence to standards, including security risk assessments, business impact analysis and accreditation on complex information systems.
• Investigate major breaches of security, recommend appropriate control improvements, and contribute to the development of information security policy, standards and guidelines.
• Maintain recognised expert-level knowledge in one or more specialisms, provide definitive expert advice, oversee and consolidate specialist advice from others including third-party experts, and support and promote the development and sharing of specialist knowledge within the organisation.
• Build on and refine outline ideas for research, apply standard methods to collect and analyse quantitative and qualitative data, produce research reports and publication-quality material, and support monitoring of the external environment and assessment of emerging technologies
• Contributing to reports, technology road mapping and knowledge sharing.
• Maintain security administration processes, provide guidance on defining access rights and privileges, and investigate security breaches in accordance with established procedures.
• Contribute to digital forensic investigations, processing and analysing evidence in line with policy, standards and guidelines and supporting the production of forensic findings and reports.
• Maintain current knowledge of malware attacks and other cyber security threats, create test cases, test scripts and test packs, and interpret, execute and document complex test scripts using agreed methods and standards.
• Specify requirements for environment, data, resources and tools, record and analyse actions and results, review test results, and report on progress, anomalies, risks, issues and system quality metrics.
• Implement the stakeholder engagement and communications plan, manage problems and resolutions, and collect and use feedback to measure the effectiveness of stakeholder management.
• Where required, manage people and resources, including contributing to recruitment and candidate pre-selection, allocating work according to experience, complexity, workload and organisational efficiency, and monitoring team workload and efficiency.

• Four-year college or university degree with a focus on Business Administration or IT or related areas, or an equivalent combination of education and experience.
• Proficient spoken and written command of English.
• At least 7 years' experience in IT.
• 5 years' experience in a relevant area.
• 2 years' experience in team management.
• Strong understanding and knowledge of the regional and global market landscape and the respective customer.
• Experience managing critical elements and cross-functional and regional projects.

• Hybrid work policy requiring attendance in the office Monday through Thursday, with the flexibility to work remotely on Friday each week.
• In-office attendance is required even on Friday for work requiring a high degree of collaboration or an in-person presentation.

• Robust and progressive medical cover, including HSA with employer funding or FSA options, dental, vision and prescription drug coverage.
• Adoption support, including surrogate and fertility support.
• Short and long-term disability, and basic life and AD&D insurance.
• Enrolment in the 401k plan and Stock Purchase Plan with employer match.
• Education assistance and generous leave policies, including 14 weeks of paid parental leave, for full-time employees.
• Eligibility to earn an annual bonus based on company performance.
• Prorated flexible time off accruing at 0.4388 hours per day, increasing with years of service.
• Twelve paid holidays throughout the calendar year and Service Time Off during milestone years.

The company believes that embedding diversity, equity and inclusion into its culture and talent processes gives employees a sense of belonging and the brand a real competitive advantage.