Director, Data & Applications Security

About the role

If you are currently employed at Smithfield, please log into Workday and submit your application through the Jobs Hub.

Have a seat at our table. When you join Smithfield, you become part of something special - a company that's sustainably feeding people around the world, producing good food the right way with respect for our people, animals, communities and planet. With opportunities across locations and functions, a culture grounded in our Core Four values - gratitude, communication, respect and accountability - and a strong commitment to learning, collaboration, and innovation, Smithfield offers challenging and rewarding careers where you can grow, contribute and make a real impact. Apply Now!

The Value You'll Bring

The position summary states the general nature and purpose of the job. Overall accountabilities are defined in this section.

As the Director, Data and Applications Security, you will lead the development and implementation of enterprise-wide data protection strategies and secure software development practices. This role oversees the creation of data security policies, governance frameworks, and secure architecture for applications and integrations across Smithfield's technology landscape.

Key responsibilities include defining data taxonomy, implementing cryptographic safeguards, managing application and API security, and transitioning the Secure Software Development Lifecycle (SSDLC) into a compliant and sustainable operating model.

You will also be responsible for integrating tools such as Cloud Access Security Broker (CASB) into Smithfield's data protection ecosystem, ensuring both proactive risk mitigation and alignment with corporate cybersecurity goals.

What You'll Do

• The below statements are intended to describe the general nature and level of work being performed by people assigned to this job.
• They are not intended to be an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.
• May perform other duties as assigned.

• Strategic Collaboration: Regularly meet with the CISO and align with Data Services and Infrastructure leadership to ensure strategic alignment, business satisfaction, and continuous improvement in cybersecurity services.
• Data Security Governance: Develop and implement enterprise-wide data classification, taxonomy, and governance policies to drive consistent data protection and compliance.
• Data Loss Prevention: Develop, manage, monitor, and deploy the enterprise strategy and tools for data loss prevention.
• Risk Management: Identify, measure, and minimize security risks across application, database, network, host, artificial intelligence, and cloud environments with a focus on data and application security.
• Capability Assessment & Roadmap: Assess the effectiveness of current data security capabilities, identify gaps, and develop a comprehensive security strategy and execution roadmap.
• Vulnerability Management: Collaborate with IT and OT leaders to manage vulnerabilities in systems supporting data and application functions.
• Vendor Oversight: Manage security vendor relationships and evaluate the effectiveness of products and services related to data and application protection.
• Audit & Compliance Support: Support internal and external cybersecurity audits for systems and service providers to ensure regulatory and policy compliance.
• Software and Asset Management: Set direction, manage, and support software and hardware asset management standards, capabilities, and reporting.
• Leadership: Drives a positive employee experience through leadership by way of employee development and coaching.

What We're Seeking

• Education & Experience: Bachelor's degree from an accredited four-year college or university and 10+ years of relevant experience in Data & Applications Security; or equivalent combination of education and experience required.
• Leadership: 5+ years of demonstrated experience in team management/development required.
• Certifications: CISSP, CISM, or equivalent certification is required.
• Enterprise Experience: Experience working in multinational organizations with complex, integrated IT and OT environments.
• Data Protection Expertise: Proven knowledge in data classification strategies, high-risk data handling, data masking, tokenization, encryption, and cryptographic controls.
• AI Risk and Governance: Knowledge and experience implementing, managing, and assessing AI risk and governance frameworks.
• SDLC & Application Security: Deep understanding of Secure Software Development Lifecycle (SSDLC), code review methodologies, and static/dynamic code analysis.
• Risk & Security Strategy: Strong background in risk management, cybersecurity strategy development, and implementation of related technologies and tools.
• Frameworks & Standards Proficiency: Working knowledge of SABSA, TOGAF, NIST, ISO 27000, and familiarity with OWASP Top 10, SANS 25, MITRE ATT&CK, and CWEs.
• Communication Skills: Excellent written and verbal communication skills, with the ability to effectively engage and negotiate across all levels of the organization.
• Collaborative Work Ethic: Respects others, works well in fast-paced environments, and builds strong, team-oriented relationships.

Other Skills That Make You Stand Out

• MS IT or MBA preferred.

Pay and benefits

The expected pay range for this position is $160,000 - $202,500 annually.

Smithfield Foods provides pay ranges that reflect its good faith estimate of the salary or hourly wage the company reasonably expects to pay for a position at the time of hire.

Individual compensation will be determined based on several factors, including but not limited to, the scope and responsibilities of the role, location of the position, the candidate's qualifications and experience, internal equity, external market pay for comparable positions and budget considerations. At Smithfield Foods, base pay represents only one aspect of the comprehensive total rewards package.

Learn more about our benefits package here.

Relocation Package Available Yes