Develop, and integrate, and improve automated, AI-enabled, and agentic security workflows that enrich, investigate, prioritize, and respond to security events using data and capabilities from enterprise security platforms.
Perform IT security assessments and remediation activities as part of the IT security organization and ensure CMG teams adhere to the NIST Framework.
Manage a suite of IT security tools providing controls that support our security policies.
Technical ownership with current or future solution providers and work closely with the Governance Risk and Compliance team to provide analysis of external, and internal risk assessments.
Work cross functionally with all departments to provide SME level security guidance on all projects which have security impact to CMG.
Guide and perform security activities including vulnerability testing and analysis, design and implementation of new solutions/features and investigation into security events.
Ensure teams are implementing applications/environments in compliance of defined security policies based on risk avoidance and security best practices.
Identify and implement opportunities to improve security tools, processes, and operations through engineering, automation, artificial intelligence, and emerging technologies.
Evaluate current and emerging security technologies, including AI-enabled and autonomous security capabilities, and provide recommendations based on technical effectiveness, operational value, risk reduction, and business requirements.
Participate as a key member in security incident response activities as well as daily Security Operational tasks.
Participate in documentation and adherence to Security Policies and Operating Procedures.
Develop and mature IT security program through interaction with Security and GRC Leadership.
Remain current with Information Security best practices.
WHAT YOU’LL BRING TO THE TABLE
BS in related field, or equivalent experience and training preferred.
5-8 years of experience leading security initiatives, projects, or cross-functional workstreams preferred.
Relevant trainings and certifications preferred (CISSP, CCSP, CCSK, TAISE, etc.).
Ability to perform event analysis and investigation.
Strong automation and integration engineering skillset.
Comprehensive understanding of Security Risk Frameworks.
Ability to configure and manage core technologies.
Strong understanding of security engineering concepts across infrastructure, identity, endpoint, network, cloud, application, data protection, vulnerability management, detection, and response.
Experience with event logging, parsing, orchestration, and alert enrichment across security platforms.
Understanding of proper maintenance of security solutions.
Strong communication and relationship building skills.
Experience in technical writing, and ability to present information at the executive level.
Skilled at performing IT security focused application/environment design reviews.
Experience using common security testing tools and techniques to assess applications, infrastructure, cloud environments, and enterprise platforms, with the ability to identify risk and recommend practical remediation.
Understanding of how generative AI, AI agents, and autonomous technologies can be applied to cybersecurity use cases.
Experience using automation, orchestration, or AI-enabled technologies to improve security operations or engineering processes.
Deeply knowledgeable about security vulnerabilities with the ability to identify them, assess risk, and provide remediation guidance.
Knowledgeable regarding incorporating security requirements into a SDLC.
Working knowledge of cloud security principles, including identity, network segmentation, logging, vulnerability exposure, workload protection, SaaS security, and secure configuration management.
Design and implementation experience in Security solutions.
PAY TRANSPARENCY
A reasonable estimate of the current base pay range for this position is $116,000.00–$162,500.00. You are also eligible for annual cash bonuses and equity awards based upon performance and other factors. Actual compensation offered may vary depending on skill level, experience, and/or education. Chipotle offers a competitive total rewards package, which includes medical, dental, and vision insurance, 401k, sick leave, vacation time, and much more. Visit https://jobs.chipotle.com/benefits for more details.
WHO WE ARE
Chipotle Mexican Grill, Inc. (NYSE: CMG) is cultivating a better world by serving responsibly sourced, classically cooked, real food with wholesome ingredients without artificial colors, flavors or preservatives. Chipotle has restaurants in the United States, Canada, the United Kingdom, France and Germany and is the only restaurant company of its size that owns and operates all its restaurants in North America and Europe. With employees passionate about providing a great guest experience, Chipotle is a longtime leader and innovator in the food industry. Chipotle is committed to making its food more accessible to everyone while continuing to be a brand with a demonstrated purpose as it leads the way in digital, technology and sustainable business practices. For more information or to place an order online, visit WWW.CHIPOTLE.COM
Chipotle Mexican Grill is an equal opportunity employer that values diversity at all levels. As a people-first company rooted in values, our purpose extends beyond serving nutritious food using real ingredients. It means hiring world-class individuals and fostering a culture that champions diversity, ensures equity, and celebrates inclusion. All qualified applicants, regardless of personal characteristics, are encouraged to apply.
Qualified applicants with disabilities may be entitled to reasonable accommodation under the terms of the Americans with Disabilities Act and/or certain state or local laws. Please contact ADAaccommodations@chipotle.com if you need an accommodation due to a disability to complete an application, job interview, and/or to otherwise participate in the hiring process. This email does not respond to non-accommodations related requests.
