Joey Smith (CISSP, EnCE) is the Vice President and Chief Information Security Officer (CISO) for Schnuck Markets, Inc. Smith joined the company as their first named CISO in January 2014 and is responsible for enhancing the security program of the company. Since joining, he has created and implemented a comprehensive risk based security strategy for the company. This has included bringing in the people, processes, and technologies needed to maintain a mature security posture. In October 2017 Smith’s role was expanded to oversee the Cloud Strategy, Network Engineering, Telephony, CCTV, Alarms and PC Support teams. In March 2024 his role was expanded to oversee IT Infrastructure and Systems Administration. His experience as a CISO has afforded him the opportunity to be a speaker at a variety of security conferences around the county.In 2015, Smith received the “Rising Star Award” from the Security Advisor Alliance recognizing him as an up and coming security leader who displays creativity, leadership and the sense of corporate citizenship necessary to handle the complex and challenging role of being a leading security executive. Additionally, in 2014 Smith was an honored recipient of the Southeast Missouri State University “Young Alumni Merit Award” and led the College of Science, Technology, and Agriculture, including the University's first Cyber Security graduate’s, into the graduation ceremony.Previous to Schnucks, Smith worked for MasterCard Worldwide running the technology company’s incident response program. From 2008 – 2012, he was the primary investigator and incident manager for MasterCard’s global incident response team. In 2012, he joined the MasterCard Account Data Compromise team. In this role, he was responsible for fraud investigations and worked closely with merchants, issuers, acquirers and other payment card brands to issue fraud alerts and respond to global breach events. He was also part of the PCI Security Standards Council responsible for reviewing the work of the various PCI forensic investigation companies to ensure the work being performed met the quality standards of the PCI Council.