Manager, Enterprise Security

Job Description:

POSITION SUMMARY:

The Manager, Enterprise Security is responsible for developing and executing Portillo’s enterprise cybersecurity strategy, ensuring security capabilities evolve with business priorities, technology modernization, and the company’s risk profile. This position defines the long-term security vision, strengthens governance, establishes architecture direction, evaluates emerging threats, and recommends the vendors, technologies, and capabilities needed to protect the business.

This role balances long-term planning with immediate business needs and rapidly changing technology and threat landscape, including the evolution of AI. It partners across the organization to integrate security into the design, implementation, and ongoing operation of Portillo’s systems, applications, data, integrations, and digital capabilities, across current and future enterprise platforms.

This position is based at the Portillo’s Restaurant Support Center in Oakbrook, Illinois with on-site presence required Monday through Thursday and flexibility to work remotely on Fridays.

CORE RESPONSIBILITIES:

Enable our Purpose to create lifelong memories by igniting the senses with unrivaled food and experiences:

Family:
Work together to make everyone feel at home, and we step up when someone needs help Greatness:
We’re obsessed with being the best and work hard to continuously improve. Our greatness is rooted in Quality, Service, Attitude and Cleanliness Energy:
We move with urgency and passion, while maintaining attention to detail

Fun:
We entertain our guests, we connect authentically, and we make each other smile

Enterprise Security Strategy and Roadmap
· Develop and maintain a multi-year enterprise cybersecurity strategy, roadmap, and budget aligned with Portillo’s business strategy, growth priorities, technology roadmap, and risk tolerance
· Monitor changes in the threat landscape, including emerging AI-enabled threats, and translate findings into practical security priorities and actions for the business
· Establish measurable security objectives and key risk and performance indicators; regularly communicate recommendations, gaps and progress to leadership
· Balance long-term security architecture and capability planning with near-term operational needs and business realities
· Align security planning and execution with initiatives supporting restaurant sales, catering growth, grand openings, and experiential initiatives
· Coordinate with Operations, Finance, Legal, Supply Chain, Risk, IT, Loyalty, Creative, and external partners to integrate security requirements into business initiatives
· Facilitate cross-functional communication and alignment to support efficient and consistent execution of security priorities

Security Architecture and Technology Governance
· Define enterprise security principles, standards, and architecture requirements for infrastructure, cloud services, business applications, data platforms and integrations
· Partner with technology and business leaders to embed security requirements into the selection, design, implementation, and ongoing operation of systems and applications
· Provide security direction for the Microsoft ecosystem, Oracle ERP, Workday, and other current and future enterprise platforms
· Ensure significant technology initiatives undergo appropriate security and risk reviews before implementation or major changesAI Security and Emerging Technology
· Develop security standards and governance practices for generative AI, intelligent agents, automation, machine learning, and other emerging technologies
· Assess risks associated with AI use, including sensitive-data exposure, unauthorized tools, identity and access misuse, insecure integrations, model or agent…