Sr. Security Engineer (Hybrid in Irvington, NY)

This is a hybrid role with 1-2 days/week in the office in Irvington, NY. We are seeking candidates who will not require sponsorship now or in the future

We are seeking a Senior IT Security Engineer to serve as the primary owner of information security across EILEEN FISHER’s entire technology landscape. This is a hands-on leadership role responsible for managing all aspects of IT security—from PCI-DSS compliance and IT governance to WAF management, e-commerce protection, and safeguarding the systems and devices used by employees across retail, corporate, and remote environments. The ideal candidate is a seasoned security professional who can operate independently, build and mature a security program, and serve as the go-to expert for all security matters within the organization.

Summary of Duties and Responsibilities

PCI-DSS & Compliance Ownership

* Own end-to-end PCI-DSS compliance across all retail point-of-sale, e-commerce, and payment processing environments

* Lead annual PCI assessments, QSA engagements, and remediation tracking to ensure continuous compliance

* Maintain and enforce the cardholder data environment (CDE) scope, segmentation, and documentation

* Coordinate PCI evidence collection, SAQ/ROC preparation, and audit readiness across all relevant systems

IT Governance & Security Program Management

* Develop, implement, and continuously improve IT security policies, standards, and procedures aligned with business strategy and frameworks (NIST CSF, CIS Controls, ISO 27001)

* Lead the annual enterprise risk assessment process, tracking findings and driving remediation to closure

* Establish and report on security KPIs and metrics to IT leadership and the executive team

* Own the security technology roadmap and prioritize investments in tools, controls, and capabilities

WAF & E-Commerce Security

* Serve as the primary owner of the organization’s WAF provider relationship—managing...