Sr. Director, Information Security

Join Our Team!

Sunbelt Rentals strives to be the customer's first choice in the equipment rental industry. From pumps to scaffolding to general construction tools, we aim to be the only call needed to outfit a job site with the proper equipment. Not only do we offer a vast fleet that ranks among the best in the industry, we pair it all with a friendly and knowledgeable staff.

Our employees are our greatest asset, and although we present a comprehensive equipment offering, our expertise and service are what truly distinguish us from the competition.

We pride ourselves on investing in our workforce and offer competitive benefits, as well as extensive on-the-job training for all eligible employees.

As a highly successful national company, we are constantly looking for talented individuals to support our growth. If you are interested in pursuing a rewarding career, we invite you to review our opportunities!

Sr. Director, Information Security is responsible for overseeing and directing the Sunbelt Rentals Information Security Organization. This entails helping to define the vision, establishing the framework and executing the overall framework for the information security strategy. This role serves as a thought and functional leader for established technologies as well as ahead-of-the-curve insight into emerging technologies and concepts and their impact to Sunbelt Rentals resulting in Information Security as a business enabler.

The Sr. Director, Information Security, will lead, develop, and execute Information Security controls and help develop initiatives for the Sunbelt Rentals Technology ecosystem, including but not limited to compliance (e.g. PCI), cyber defense, security architecture, security measurement, incident management and security operations.

• Oversight of information security operations including all aspects of detect and response
• Operate and maintain incident response program
• Define and establish information security and data protection strategies and directives
• Oversight of the Information Security Governance, Risk and Compliance program including PCI, DFARS, CMMC, CCPA, GDPR, and other emerging regulatory or compliance initiatives
• Define, implement, maintain and enforce information security policies and procedures
• Manage a diverse team of security managers, engineers, administrators, analysts and other cross‑functional professionals
• Direct and approve Security Architecture across all Sunbelt systems in partnership with the Enterprise Architecture Council
• Institute organization‑wide information security awareness, protocols and procedures
• Assess, test and select new information security solutions and technologies
• Manage 3rd party risk through customer and supplier contract review and security questionnaire baselining for risk management and compliance
• Oversight of vulnerability management and penetration tests
• Manage information security audits and measurement
• Partner with legal on privacy policy and legal discovery
• Partner with development and support teams in establishing and maintaining a secure SDLC including defining baselines and standards
• Define and administer department and project budgets
• Govern identity management practices across all systems
• Align information security practices to business requirements, goals and initiatives in partnership with enterprise business units for information security delivery and business enablement
• Oversee and direct information security needs for emerging and ongoing project’s needs, e.g., business acquisitions, Greenfields, special cases as related to security management
• Communicate and deliver information security reporting and metrics to the organizational risk committee, executive leadership and cross‑functional team
• Act as a counsel and advisor to peers and the senior leadership for information security risk management
• Develop and Manage partner relationships in alignment with S  strategy: including smart source planning, SOW work engagement, and cost negotiations

• Bachelor's Degree or equivalent work experience plus 15+ years in Information Security equivalent experience focusing on infrastructure,…