At SpartanNash, we deliver the ingredients for a better life through customer-focused innovation. We do this for our supply chain customers and U.S. military commissaries, retail store guests and, most importantly, our Associates. In fact, we see a day when each will say, “I can’t live without them.”
Our SpartanNash family of Associates is 20,000 strong, ranging from bakery managers to order selectors; from IT developers to vice presidents of finance; from HR Business Partners to export specialists. Each of them plays an integral role in SpartanNash’s People First culture, Operational Excellence and Insights that Drive Solutions. Ready to contribute to the success of our food solutions company? Apply now!
Location:
850 76th Street S.W. - Byron Center, Michigan 49315Job Description:
Position Summary:
SpartanNash is seeking a strategic and hands-on Chief Information Security Officer (CISO) to lead the development, execution, and oversight of our enterprise-wide information security program. Reporting directly to the CIO, the CISO will define and execute a comprehensive cybersecurity strategy that ensures the confidentiality, integrity, and availability of our digital assets across retail, supply chain, and corporate environments.
This executive leadership role is responsible for overseeing security operations, risk assessment and mitigation, policy and governance, regulatory compliance, and incident response. The ideal candidate will bring deep technical knowledge, strong leadership capabilities, and the ability to influence and collaborate with stakeholders at all levels—including executive leadership, board members, and external partners.
Here's What You’ll Do:
Set the strategic vision, measurable objectives, and governance model for the information security organization.
Lead the design, implementation, and continuous improvement of a risk-based information security program aligned with business objectives.
Ensure security operations, incident response, and compliance activities are effectively managed and monitored.
Maintain and enforce enterprise-wide information security policies, standards, and procedures.
Monitor internal and external cyber threat landscapes, ensuring timely response to emerging risks.
Serve as the company’s subject matter expert on cybersecurity, providing leadership and guidance across the organization.
Collaborate with internal business partners on RFPs, RFIs, and vendor evaluations to ensure security risk is appropriately assessed and managed.
Translate applicable regulatory and compliance requirements into actionable security controls and protocols.
Represent the organization in regulatory, audit, and client-facing security discussions.
Drive a culture of security awareness and ensure alignment between security and enterprise IT architecture, cloud platforms, ERP systems, and application development lifecycles.
Here’s What You’ll Need:
Bachelor’s degree in Computer Science, Information Systems, Business, or related field.
15+ years of progressive experience in Information Technology, with at least 10+ years focused on Information Security.
2+ years of CISO experience
Demonstrated leadership experience managing enterprise cybersecurity programs in complex environments.
Deep technical expertise across a range of security technologies, cloud platforms, and enterprise systems.
Proven ability to apply risk management principles in business-driven environments.
Strong understanding of security frameworks, compliance standards, and regulatory obligations (e.g., NIST, ISO, SOX, PCI).
Exceptional communication, executive presence, and stakeholder engagement skills.
Experience with application lifecycle management and secure software development practices.
Industry-recognized security certification required (e.g., CISSP, CISM).
Physical Requirements:
The physical demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
May be required to lift and/or move 20 pounds. The associate is frequently required to sit/stand/walk. While performing the duties of this position, the associate is subject to a typical office environment and is rarely exposed to outside weather conditions. Temperatures may vary for those subject to any of the following areas: computer/server room, print shop, production area). The noise level in the work environment is usually low to moderate but may be high in distribution settings. Travel requirements vary by assignment.
As part of our People First culture, SpartanNash is proud to offer a robust and competitive Total Rewards benefits package.
SpartanNash is an Equal Opportunity Employer that invests in Associate development, recognizes and celebrates success, fosters two-way communication, and promotes a sense of belonging. We are committed to providing equal employment opportunities to all individuals, including those with disabilities and Veterans.
We are not able to sponsor work visas for this position.
