Joey Smith

As Vice President and Enterprise Chief Information Security Officer (CISO) for Schnuck Markets, Inc., Joey Smith (CISSP, EnCE) has been a pivotal leader in the company's technological evolution. Since becoming Schnucks first named CISO in January 2014, Joey has been responsible for transforming and continuously enhancing the organization's Information Security security program. He developed and executed a comprehensive, risk-based security strategy, bringing in essential people, processes, and technologies to ensure a robust and mature security posture. His exceptional leadership and strategic vision have led to expanded responsibilities, now encompassing Cloud Strategy, Network Engineering, IT Infrastructure, Disaster Recovery, Telephony, IT Help Desk, and PC Support teams. In 2025, his responsibilities further broadened to lead the creation and oversight of the Schnucks Enterprise Information Security Office, which supports all of Schnucks' extensive business holdings. In 2015, Smith received the “Rising Star Award” from the Security Advisor Alliance recognizing him as an up and coming security leader who displays creativity, leadership and the sense of corporate citizenship necessary to handle the complex and challenging role of being a leading security executive. Additionally, in 2014 Smith was an honored recipient of the Southeast Missouri State University “Young Alumni Merit Award” and led the College of Science, Technology, and Agriculture, including the University's first Cyber Security graduate’s, into the graduation ceremony. Previous to Schnucks, Smith worked for MasterCard Worldwide running the technology company’s incident response program. From 2008 – 2012, he was the primary investigator and incident manager for MasterCard’s global incident response team. In 2012, he joined the MasterCard Account Data Compromise team. In this role, he was responsible for fraud investigations and worked closely with merchants, issuers, acquirers and other payment card brands to issue fraud alerts and respond to global breach events. He was also part of the PCI Security Standards Council responsible for reviewing the work of the various PCI forensic investigation companies to ensure the work being performed met the quality standards of the PCI Council.