Chief Information Security Officer

Overview

Here at Discount Tire, we celebrate the spirit of our people with extraordinary pride and enthusiasm. Our business has been growing for more than 60 years and now is the best time in our history to join us. We are opening more locations every year and we are always looking for qualified individuals to join us in our growth. We are a company that promotes from within, both in our retail and corporate operations.

The Chief Information Security Officer (CISO) is an executive leader responsible for enterprise-wide Cybersecurity, Enterprise AI Governance & Security, IT Risk Management, and Disaster Recovery & Resiliency for a $10+ billion retail organization. This role serves as the senior authority accountable for protecting the confidentiality, integrity, availability, and resiliency of corporate information systems, customer data, store operations, supply chain platforms, digital ecosystems, and AI-enabled capabilities.

The CISO establishes and executes a comprehensive enterprise strategy across security, risk, resiliency, and AI governance to enable sustainable business growth while mitigating operational, regulatory, financial, cyber, and emerging AI‑related risks. This leader partners closely with executive leadership, technology teams, business stakeholders, auditors, regulators, and the Board of Directors to ensure enterprise technology risks are proactively identified, effectively managed, and clearly communicated.

This role operates as a strategic advisor to executive leadership and the Board, driving enterprise risk visibility, resilience readiness, and secure innovation across the organization. Creates the overall department vision and drives employee and leadership performance to execute on short and long term goals. Builds and manages a high performance function and provides expert level leadership to all levels within the department.

Embodies IOOGA (Integrity, Our People, Our Customers, Growth and Attitude).

• Define and execute the enterprise cybersecurity strategy aligned to business objectives and growth priorities.
• Lead all major security domains including security operations, architecture, identity and access management (IAM), cloud security, application security, data protection, governance/risk/compliance (GRC), threat detection, incident response, vulnerability management, and security awareness.
• Establish enterprise-wide security standards, controls, and continuous improvement mechanisms.
• Establish and lead the enterprise AI governance and security program.
• Define AI security policies, standards, and control frameworks supporting responsible AI adoption.
• Assess and mitigate risks related to Generative AI, large language models (LLMs), machine learning, and AI‑enabled business processes.
• Oversee AI model security, data privacy, regulatory compliance, monitoring, and reporting for AI technologies and third‑party AI platforms.
• Own the enterprise IT risk management framework, including risk appetite, risk assessments, and technology risk register.
• Lead vendor and third‑party risk programs, risk metrics, and key risk indicators (KRIs).
• Deliver executive risk reviews and maintain Board‑level visibility into technology risk exposure.
• Lead enterprise disaster recovery and technology resiliency programs.
• Define recovery strategies, objectives, and testing protocols, including failover exercises and readiness reviews.
• Drive continuous improvement of resiliency capabilities and enterprise preparedness.
• Ensure compliance with applicable regulatory, privacy, security, and audit requirements.
• Lead enterprise governance processes, including risk committees, policy management, and executive reporting structures.
• Establish scalable governance frameworks supporting enterprise growth and risk transparency.
• Serve as the primary technology risk advisor to the Board of Directors and Board committees.
• Deliver clear, actionable reporting on cybersecurity posture, AI governance maturity, IT risk exposure, resiliency readiness, and significant incidents.
• Develop and present executive‑level materials to facilitate informed Board discussions and decision‑making.
• Act as a…