iHerb, LLC

Bilingual

• Support in managing of projects from design through implementation that support growth and operational improvements for the company.
• Identify, drive and develop best practices, efficiencies, and process workflows.
• Perform day-to-day management of operation activities; prioritize, resolve issues and discrepancies as they surface.
• Collaborate with applicable stakeholders including Inventory Planning, Marketing, Warehouse Operations, and Engineering.
• Manage and execute multiple time-sensitive projects to meet business objectives; liaise with management on defining project scope, goals, deliverables and executing as needed.
• Support in identifying resource requirements and schedule project activities.
• Ensure that projects/tasks meet deadlines and escalate issues which may impact successful implementation/execution.
• Conduct data collection and analysis and perform reporting for projects and KPIs.
• Actively identify and scope new opportunities to improve customer service and business processes.
• Present information to people at multiple levels in and outside of iHerb.
• Perform other duties as assigned.
• Working hours between 5:30AM EST-1:30PM EST.

3PL Logistics Specialist, Arabic Speaker

Security Engineer

• Lead global information security program with emphasis on Governance, Risk, and Compliance (GRC), Data Governance, and Application/Product Security
• Drive strategy, execution, and oversight of enterprise-wide security initiatives to protect customer trust and sensitive data
• Develop a vision and multi-year strategy for governance and risk management with measurable goals and metrics
• Design, develop, coordinate, and document the secure operation of information systems and enterprise-wide data protection best practices
• Ensure application/product security practices align with industry standards, regulations, and compliance frameworks and maintain necessary certifications
• Oversee implementation of advanced security monitoring and analysis tools to detect and respond to security incidents and vulnerabilities
• Evaluate the security posture of third-party cloud providers and vendors and implement strategies to manage and mitigate associated risks
• Build, mentor, and lead security engineering, product security, cloud security, and GRC teams; foster a collaborative and innovative environment
• Oversee penetration testing, vulnerability management, and remediation processes for applications and APIs
• Partner with engineering teams to embed security into SDLC and CI/CD pipelines and champion DevSecOps practices
• Act as a trusted advisor to executive leadership and the board on emerging security threats and business risks
• Foster a security-first culture across the enterprise through training and awareness programs

3PL Logistics Specialist, Arabic Speaker

Director of Information Security