Sobeys is one of only two national grocery retailers in Canada - more than 1,600 stores across all ten provinces operating under banners like Safeway, IGA, Foodland, FreshCo, and Voilà. Founded in 1907, the company employs 128,000 people and spans food retail, pharmacy, and online grocery delivery. That scale - over a century of operations, a sprawling physical footprint, and a workforce larger than some small cities - defines the attack surface.
The threat model for a retailer this size is broad: point-of-sale infrastructure, supply chain systems, pharmacy data under regulatory obligations, customer loyalty platforms, and a growing e-commerce stack through Voilà. A cybersecurity team here isn't defending a single perimeter; it's managing risk across legacy retail systems, cloud-native delivery platforms, and the intersection of personal health and financial data. PCI-DSS compliance is table stakes; privacy regulations and operational technology in distribution centers raise the complexity further.
Sobeys has been consistently recognized as one of Canada's Top 100 Employers. The company's stated commitments center on community, quality, and employee experience - framing that matters less than the concrete operational reality: securing the data and systems behind one of the country's largest retail operations, from store-level endpoints to enterprise infrastructure.
