Director, Data & Applications Security

THE VALUE YOU’LL BRING:

The position summary states the general nature and purpose of the job. Overall accountabilities are defined in this section. As the Director, Data and Applications Security, you will lead the development and implementation of enterprise-wide data protection strategies and secure software development practices. This role oversees the creation of data security policies, governance frameworks, and secure architecture for applications and integrations across Smithfield’s technology landscape.

Key responsibilities include defining data taxonomy, implementing cryptographic safeguards, managing application and API security, and transitioning the Secure Software Development Lifecycle (SSDLC) into a compliant and sustainable operating model. You will also be responsible for integrating tools such as Cloud Access Security Broker (CASB) into Smithfield’s data protection ecosystem, ensuring both proactive risk mitigation and alignment with corporate cybersecurity goals.

• Strategic
  
  Collaboration:
  
  Regularly meet with the CISO and align with Data Services and Infrastructure leadership to ensure strategic alignment, business satisfaction, and continuous improvement in cybersecurity services.
• Data Security Governance:
  Develop and implement enterprise-wide data classification, taxonomy, and governance policies to drive consistent data protection and compliance.
• Data Loss Prevention:
  Develop, manage, monitor, and deploy the enterprise strategy and tools for data loss prevention.
• Risk Management:
  
  Identify, measure, and minimize security risks across application, database, network, host, artificial intelligence, and cloud environments with a focus on data and application security.
• Capability Assessment &
  
  Roadmap:
  
  Assess the effectiveness of current data security capabilities, identify gaps, and develop a comprehensive security strategy and execution roadmap.
• Vulnerability Management:
  Collaborate with IT and OT leaders to manage vulnerabilities in systems supporting data and application functions.
• Vendor Oversight:
  Manage security vendor relationships and evaluate the effectiveness of products and services related to data and application protection.
• Audit & Compliance Support:
  Support internal and external cybersecurity audits for systems and service providers to ensure regulatory and policy compliance.
• Software and Asset Management:
  Set direction, manage, and support software and hardware asset management standards, capabilities, and reporting.
• Leadership:
  Drives a positive employee experience through leadership by way of employee development and coaching.

• Education & Experience:
  
  Bachelor’s degree from an accredited four-year college or university and 10+ years of relevant experience in Data & Applications Security; or equivalent combination of education and experience required.
• Leadership: 5+ years of demonstrated experience in team management/development required.
• Certifications:
  
  CISSP, CISM, or equivalent certification is required.
• Enterprise
  
  Experience:
  
  Experience working in multinational organizations with complex, integrated IT and OT environments.
• Data Protection Expertise:
  Proven knowledge in data classification strategies, high-risk data handling, data masking, tokenization, encryption, and cryptographic controls.
• AI Risk and Governance:
  Knowledge and experience implementing, managing, and assessing AI risk and governance frameworks.
• SDLC & Application Security:
  Deep understanding of Secure Software Development Lifecycle (SSDLC), code review methodologies, and static/dynamic code analysis.
• Risk & Security Strategy:
  Strong background in risk management, cybersecurity strategy development, and implementation of related technologies and tools.
• Frameworks & Standards…