Director Information Security

Purpose & Overall Relevance for the Organization:

- The Director Information Security role is responsible for ensuring the completeness (fitness-for-purpose) and integrity of adidas’ information security architecture, designing, documenting, delivering and improving information security solutions and building blocks, and providing consultancy for their reuse. This includes continuous monitoring and management of requirements, including information security risks, stakeholder needs, and emerging technologies.
- This role will require Consulting and Engineering in the development and design of corporate security best practices and implementation of solid security principles across the organization, to meet business goals along with customer and regulatory requirements.
- This position reports directly to the Sr Director Information Security
- Identity & Access management.
- Key Responsibilities:

- Information security_
- Develops and communicates corporate information security policy, standards and guidelines.
- Contributes to the development of organisational strategies that address information control requirements.
- Identifies and monitors environmental and market trends and pro-actively assesses impact on business strategies, benefits and risks.
- Leads the provision of authoritative advice and guidance on the requirements for security controls in collaboration with experts in other functions such as legal, technical support. Ensures architectural principles are applied during design to reduce risk and drives adoption and adherence to policy, standards and guidelines.
- Security Architecture_
- Set strategy and roadmap for Identity & Access management
- Review existing IAM environment against use-cases and strategy.
- Support the design, build and implementation of enterprise-class security systems for a production environment.
- Align standards, frameworks and security with overall business and technology strategy.
- Design / adapt security architecture elements to mitigate threats as they emerge.
- Design / adapt solutions that balance business requirements with information and cyber security requirements.
- Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.
- Contribute to enterprise level Architecture Principles Design from the information security perspective.
- Collaborate with, and facilitate stakeholder groups, as part of formal or informal consultancy agreements.
- Consultancy_
- Takes responsibility for understanding client requirements, collecting data, delivering analysis and problem resolution.
- Identifies, evaluates and recommends options, implementing if required.
- Collaborates with, and facilitates stakeholder groups, as part of formal or informal consultancy agreements.
- Seeks to fully address client needs, enhancing the capabilities and effectiveness of client personnel, by ensuring that proposed solutions are properly understood and appropriately exploited.
- Specialists advise_
- Actively maintains recognized expert level knowledge in one or more identifiable specialisms.
- Provides definitive and expert advice in their specialist area(s).
- Oversees the provision of specialist advice by others, consolidates expertise from multiple sources, including third party experts, to provide coherent advice to further organisational objectives.
- Supports and promotes the development and sharing of specialist knowledge within the organisation.
- Research _
- Builds on and refines appropriate outline ideas for the evaluation, development, demonstration and implementation of research.
- Contributes to research goals and funding proposals.
- Collects and analyses qualitative and quantitative data as required.
- Creates research reports to communicate research methodology, findings and conclusions.
- Presents papers at conferences, contribute significant sections of material of publication quality, and presents reports to clients.
- Contributes to research plans and identifies appropriate opportunities for publication and dissemination of research findings.
- Makes an active contribution to research communities.
- Emerging trends & technology monitoring
- Maintain expertise by tracking and understanding emerging security practices and standards, participating in educational opportunities, reading professional publications, maintaining personal networks, participating in professional organizations.
- Monitors the external environment to gather intelligence on emerging technologies.
- Assesses and documents the impacts, threats and opportunities to the organization.
- Creates reports and technology roadmaps and shares knowledge and insights with others.
- Security administration
- Ensures that all identified breaches in security are promptly and thoroughly investigated and that any system changes required to maintain security are implemented.
- Ensures that security records are accurate and complete and that request for support are dealt