We have many opportunities available on our other career site pages. Click here to link to our careers page!

Signet Jewelers is the world's largest retailer of diamond jewelry, operating more than 2,800 stores worldwide under the iconic brands: Kay Jewelers, Zales, Jared, H.Samuel, Ernest Jones, Peoples, Banter by Piercing Pagoda, Rocksbox, JamesAllen.com and Diamonds Direct. We are a people-first company and this core value is at the heart of everything we do, from empowering our valued team members, to collaborating with our customers, to fostering the communities in which we live and serve. People – and the love their actions inspire – are what drive us. We’re not only proud of the love we inspire outside our walls, we’re especially proud of the diversity, inclusion and equity we’re inspiring inside. There are dynamic career paths awaiting you – rewarding opportunities to impact the lives of others and inspire love. Join us!

Director - Risk Assessment

Location: Remote

POSITION SUMMARY:

Signet is looking for a motivated and passionate leader for the Director Information Security. This position will be responsible for providing executive leadership of all infrastructure related security matters. This will require leading a series of transformational initiatives, including network security re-architecture, host security architecture, security incident response, and vulnerability management programs. The position will require past experience overseeing the security of large IT environments through entire program lifecycle, including but not limited to, implementations, integrations with various systems and processes, supporting legacy systems, and partnering with business executives to help drive transformational process reengineering, process harmonization, and organization design.

RESPONSIBILITIES:

• Manage and evolve the vendor risk assessment program. Design the due diligence process, implement risk mitigation strategies, and work with procurement and legal to ensure contractual security clauses are enforced.
• Manage vendor cybersecurity risk across the global supply chain. Implement frameworks such as NIST CSF and develop risk scores based on vendors’ impact and criticality to the business.
• Champion third-party cybersecurity risk across the organization. Conduct continuous monitoring, lead incident response coordination for vendor-related breaches, and provide executive reporting.
• Report regularly to senior leadership, including CISO, on the state of third-party security risk.
• Maintain a risk register of critical vendor findings, ensure timely remediation, and track SLAs.
• Serve as the primary contact for vendor security discussions, due diligence support, and ongoing relationship management.
• Provide guidance to business units and project teams during vendor selection and procurement processes.
• Optionally, review vendor Data Protection Impact Assessments (DPIAs) and participate in privacy-related risk analysis.

POSITION QUALIFICATIONS:

• Bachelor’s degree, or equivalent experience. 
• Certifications a plus.
• 10+ years related experience.
• Experience in project management, from conception to delivery.
• Experience in managing large, complex projects and large teams.
• Experience managing consultants/contractors at scale.
• Extensive experience with a variety of security control tools and processes
• Strong communication and interpersonal skills, ability to independently set direction and own resolution.

BENEFITS & PERKS:

• Competitive healthcare, dental & vision insurance
• 401(k) matching after one year of employment
• Generous time off + company holidays
• Merchandise discount
• Learning & Development programs
• Much more!

The salary range for this opportunity is $140,000 - $200,000. Base pay offered may vary depending on geographic region, internal equity, job related knowledge, skills and experience, among other factors.