At SAGE®, we believe great food is only possible when the systems behind it work flawlessly. We're a mission-driven hospitality company dedicated to creating exceptional dining experiences that delight the senses, inspire minds, and foster community. We're seeking a Director of Information Security to lead and elevate our enterprise cybersecurity program, ensuring the security of the data and technology our communities rely on while fostering a culture where safety extends from the kitchen to the keyboard.
As a trusted technology leader, you'll inspire a security-first mindset across the organization, where protecting our employees, communities, business, and the sensitive information entrusted to us is as essential as the care we bring to every meal we serve. This is a unique opportunity to influence executive strategy, strengthen organizational resilience, and build a modern security program that enables innovation while managing risk.
If you're a visionary cybersecurity leader who enjoys solving complex challenges, partnering with executive stakeholders, and building resilient, forward-thinking security programs, we want to hear from you.
The ideal candidate will be based in the Baltimore area and work primarily from our Home Offices in Lutherville, MD. We may also consider applicants who live within a reasonable commuting distance.
Summary:
The Director of Information Security will lead the organization's information security strategy, governance, and risk management program. The Director is responsible for safeguarding our digital ecosystem, protecting sensitive data, ensuring compliance with cybersecurity and privacy regulations, and strengthening our defenses against an ever-evolving threat landscape. This role combines strategic leadership with operational excellence, partnering across Technology, Culinary, Operations, HR, Legal, and our school communities to embed security into every aspect of the organization.
Salary Range: $170,000 -$220,000
Time Commitment: Full-time
What you'll get:
- Competitive Pay & Benefits.
- Awesome Collaborative Team Culture.
- Growing mission-based company.
- New position on the team with opportunity to aid in the formulation of tasks.
What you'll do:
- Develop, implement, and maintain a comprehensive security program that includes cyber defense, data protection, and security operations across corporate and field environments.
- Conduct risk assessments, identify vulnerabilities, and prioritize remediation efforts to reduce risk.
- Lead recurring NIST CSF-based assessments, gap analysis, prioritization, and remediation roadmap development across enterprise, software, and operational environments.
- Oversee security incident detection, response, and recovery, ensuring swift mitigation of potential breaches and timely notification to affected parties and school partners.
- Manage the security architecture, tools, and technologies deployed across SAGE's IT infrastructure, applications, and vendor integrations.
- Coordinate with legal, compliance, and regulatory teams to ensure compliance with data protection laws applicable to our business, such as FERPA, PCI DSS, and applicable state and federal privacy regulations.
- Monitor security metrics and report on the company’s security posture to executive leadership.
- Lead security awareness training programs for employees to promote a culture of cybersecurity across the organization, from the home office to on-site dining teams.
- Stay updated on cybersecurity trends, technologies, and best practices to enhance security proactively.
- Develop and maintain a policy architecture that translates enterprise security requirements into domain-specific standards, procedures, and evidence expectations.
- Own the SSDLC program charter and application security operating model using SAMM or an equivalent framework.
What you'll need:
- Bachelor's degree in Information Security, Computer Science, or a related field (or relevant experience).
- Minimum of 10 years of demonstrable experience as a Chief Information Security Officer or in a similar senior-level cybersecurity role.
- Extensive knowledge of information security principles, cybersecurity frameworks (e.g., NIST, ISO 27001), and risk management practices.
- Working knowledge of security auditing, vulnerability assessments, and risk mitigation.
- Experience with security technologies such as firewalls, intrusion detection systems, SIEMs, and encryption.
- Solid knowledge of data privacy regulations and compliance requirements.
- Ability to develop and implement complex security strategies.
- Strong leadership and communication skills, with the ability to influence decision-making at all levels.
- Exceptional analytical and problem-solving skills with a keen eye for identifying potential risks and vulnerabilities.
- Ability to manage a team of security professionals and work cross-functionally with IT, legal, and compliance teams.
- Expertise in Secure Software Development and DevSecOps practices.
- Relevant certifications in cybersecurity, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) preferred.
- Experience with cloud security and securing cloud infrastructure.
- Familiarity with incident management and disaster recovery planning.
- Knowledge of ethical hacking and penetration testing techniques.
- Background in regulatory compliance and data privacy laws relevant to our industry (e.g., FERPA, PCI DSS, HIPAA, and state student-data and consumer-privacy laws).
- Hands-on experience with SIEM tools, firewalls, and intrusion detection systems.
- Understanding of artificial intelligence and machine learning applications in security.
- Experience securing multi-site, distributed operations and third-party/vendor integrations common in food service and hospitality technology.
About SAGE
SAGE Home Office teams — from Accounting and HR to Marketing, Technology, and more — provide the behind-the-scenes expertise that supports our dining operations and helps them thrive.
Here, you’ll find a collaborative environment where professionals from diverse fields work together to solve challenges, share ideas, and make an impact. Whether you specialize in nutrition, sales, purchasing, or strategy, your work will help our Operations Teams deliver fresh, chef-inspired dining experiences that bring joy and community to campuses nationwide.
Whether you’re looking for a new challenge, a sense of purpose, or a place where your skills can grow, you’ll find it here. At SAGE, we believe your career should empower you, inspire you, and give you the chance to make a difference every day.
Management Team Members enjoy comprehensive medical, dental, and vision coverage with multiple plan options; company-paid short-term disability; company-paid life insurance; supplemental life insurance; long-term disability; a 401(k) with company match; a discount buying program; an employee assistance program; paid holidays and personal days; and benefits through the SAGE Foundation, including access to apply for academic scholarships for dependents and disaster assistance. Home Office management employees have a PTO policy.
GROW. CREATE. COLLABORATE.
Learn more about working here at sagedining.com or connect with us on Instagram, LinkedIn, Facebook, and X.
This job advertisement should not be misconstrued as an offer of employment or a comprehensive listing of position responsibilities/expectations.
Equal opportunity employer.
If you’re a candidate living in California or applying for a position in California, please visit sagedining.com/blog/post/156768/california-consumer-privacy-notice-to-california-employees-and-job-applicants for information regarding SAGE’s California privacy practices.
Pay: $170,000.00 - $220,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Employee assistance program
- Employee discount
- Flexible schedule
- Health insurance
- Health savings account
- Life insurance
- Paid time off
- Referral program
- Retirement plan
- Vision insurance
Work Location: In person
