Senior Manager, Cyber Security

Peetniks are passionate and authentic, learners and doers, committed to the pursuit of better. The only thing we love more than coffee is our people.

Peet’s is seeking a Senior Manager, Cyber Security to lead and mature the company’s enterprise cyber security program. This role is responsible for the strategy, execution, and day‑to‑day management of information security capabilities that protect Peet’s people, customers, and information assets. The Senior Manager will partner closely with IT, Digital, Legal, Compliance, and business leaders to enable secure business outcomes while managing risk in a pragmatic, business‑aligned manner.

Reporting to Director of Infrastructure and Security, this role focuses exclusively on cyber security and IT risk management and serves as a hands‑on leader who can operate both strategically and tactically.

$160,000 – $180,000

Emeryville, CA – Hybrid, 3 days onsite

• Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the organization.
• Facilitate information security governance through implementation of a hierarchical governance program, including the formation of an information security steering committee or advisory board.
• Develop, maintain and publish up‑to‑date security policies, standards and guidelines, and oversee training and dissemination of security policies and practices.
• Create, communicate and implement a risk‑based process for vendor risk management, including assessment and treatment for risks that may result from partners, consultants and other service providers.
• Develop and manage information security budgets and monitor them for variances.
• Create and manage information security and risk management awareness training programs for all employees, contractors and approved system users.
• Work directly with the business units to facilitate IT risk assessment and risk management processes, and work with stakeholders through the enterprise on identifying acceptable levels of residual risk.
• Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls.
• Liaise with the JDE Peets global security and enterprise architecture teams to ensure alignment between the security and enterprise architectures, thus coordinating the strategic planning implicit in these architectures.
• Coordinate information security and risk management projects with resources from the IT organization and business unit teams.
• Create and manage a unified and flexible control framework to integrate and normalize the wide variety and ever‑changing requirements resulting from global laws, standards and regulations.
• Ensure that security programs are compliant with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
• Liaise among the information security team and Peet’s corporate compliance, audit, legal and HR management teams as required.
• Define and facilitate the information security risk assessment process, including the reporting and oversight of treatment efforts to address negative findings.
• Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company’s reputation.
• Act as an escalation point for complex security issues and risk decisions.

• Identifying the right balance of in‑house versus professional services consultants to meet the demand for services
• Negotiate favorable software and professional services contracts with reputable vendors
• Drive effective governance and engagement with partners and suppliers to ensure cost effectiveness and timely deliverables
• Keep informed of issues and risks across all technology organizations, anticipate impact, and mitigate risks

• Gets things done, with both a short and long‑term view in mind
• Pragmatic and outcome‑oriented, leveraging data to make decisions
• Thrives in a fast paced, agile environment with excellent organizational skills…