Key Responsibilities:   

• Devise reasonable, risk-based security controls to monitor and protect SPS and align with our business objectives

• Stay informed of Identity and Access Management (IAM) security best practices and application to technology development and implementation practices for operations – accountable for driving the integration of approved IAM security patterns into development operations and existing continuous delivery/continuous improvement business processes

• Devise reasonable security controls to protect SPS and align with our business objectives

• Manage IAM and Data Protection platforms and capabilities as well as build new capabilities as needed to meet the needs of our internal and external customers

• Build automated capabilities to meet the needs and demands of our business customers

• Help support our operations team ensuring work handed to them if fully documented, work properly transitioned, and accepted.

• Develop, manage, and consult on the technical architecture for enterprise security controls

• Partner with business and technology operations groups to manage and maintain the security technology stack (identity solutions, cloud capabilities, audit tools)

• Support and/or lead periodic internal and external security assessments, third-party assessments and due-diligence initiatives

• Develop, manage, and consult on the technical architecture for enterprise security controls

Required Qualifications:   

• Minimum 5 years of experience with bachelor’s degree in related business or technical areas; Master’s degree with 3 years of related business or technical areas; or an equivalency of education and work experience
• Equivalent work experiences includes: security engineering/architecture experience and designing and implementing standards, specifications, and procedures
• Experience in providing technical security guidance to technical and non-technical audiences
• Experience with regulatory requirements from SOX, HIPAA, and PCI-DSS
• Working knowledge of development operations practices – accountable for driving the integration of security into development operations and existing continuous delivery / continuous improvement business processes 

Preferred Qualifications:   

• System configuration and architecture experience
• Strong knowledge of industry accepted information security best practices, standards, and policies such as NIST CSF, OWASP, CIS, STIG, MITRE ATT@CK, etc.
• Proven ability to manage information security service and operation through effective management of resources
• Demonstrated experience and understanding of business security and compliance requirements and ability to translate into well-engineered & integrated business solutions
• Demonstrated ability to take initiative and accountability for achieving results
• Driven to understand & appropriately respond to customers' business needs
• Certifications & Licenses: One or more industry certification - CISSP, CISM, CISA, CCFE, GIAC, CCIE, CCSP, ABCP, MBCP, ISA, PCIP, CEH
• Actively participates and contributes to the security community

Location:  

This role follows a hybrid work model, with regular in-office presence required at our Minneapolis office. 

What We Offer: 

At SPS Commerce, we are committed to ensuring that each employee's compensation reflects their unique experiences, performance, and skills in their role.

The salary range for this role considers several factors, including education, relevant skills, work history, certifications, location, and more.  

The annual salary range for this role is: $108,200 - $167,700. The actual salary offered will be determined based on the factors listed above and may fall anywhere within the range.   

SPS Commerce offers a comprehensive benefits package designed to support employees’ health, well-being, and financial security. Benefits are country-specific and aligned with local laws and market practices.