IT Security Analyst

The position is in the Strategy, Planning and Execution (SPE) team, in the Information Risk Management (IRM) department. IRM is responsible for managing the Information Security risk for the organization. The SPE team leads the creation of the multi-year strategy and IRM roadmaps, and manages the execution of the plans. SPE also defines the corporate security standards, performs risk assessments, and measures organizational security performance.

ESSENTIAL FUNCTIONS

Perform application and system risk assessments and security audits of internal and external facilities against established standards

Provides consultative advice to information security customers that enables them to make informed risk management decisions

Contribute in establishing policies and procedures necessary to ensure the security of information system assets, and to protect them from intentional or inadvertent access, disclosure, or destruction

Assists project teams in the implementation of security measures to meet corporate security policies and external regulations, e.g., Sarbanes Oxley, HIPAA

Weigh business needs against security concerns and articulate issues and options to management

Maintains appropriate security documentation for applications and systems

Ensures that user community understands and adheres to necessary procedures to maintain security

Communicates risk assessment findings to information security customers, or business partners

Active participation in strategic initiatives in accordance to the IRM roadmap

Qualifications

QUALIFICATIONS

At least 5 years of IT experience with a Bachelor's Degree in computer related field or equivalent

At least 3 years of experience in Information Security

PC skills including knowledge of Microsoft Office

Excellent organizational skills and ability to communicate with internal / external entities and executives a must

Effective leadershipskills,demonstrated ability to coordinate people and teams to project / activity completion and the ability to work in a team environment, sharing workloads and responsibilities

Customer service-oriented; Ability to work in a flexible environment where requirements and procedures continuously evolve

Certification in information security (CISSP, CISM, GIAC, or equivalent) preferred

Additional Information

All your information will be kept confidential according to EEO guidelines.

#J-18808-Ljbffr