Vacancy expired!
Complete Description
Essential Duties and Responsibilities:• Provides knowledge transfers regarding cybersecurity vulnerabilities, risks, controls, and mitigation strategies toboth technical and non-technical users.• Monitors and remains current on the latest cybersecurity trends, security risks and threats to provide governanceand enhancement recommendations to align with enterprise risk tolerance.• Partners with IT control owners to design and implement controls that adhere to both regulatory requirements (PCI,HIPPA, etc.) and Company policies, while providing consistent, high quality, and auditable results.• Acts as the subject matter expert for the information security team by modeling behaviors consistent withcybersecurity best practices, while educating the business community and promoting security awareness.• Conducts, tracks, and measures the effectiveness of security awareness initiatives through periodic testing usingsimulated campaigns (i.e. phishing, vishing).• Assists with the preparation of reports, metrics, and scorecards concerning information security initiatives.• Performs and/or coordinates periodic risk and security assessments, penetration testing, and vulnerabilityscanning/management oversight.• Assists in overseeing both internal and external audits by acting as liaison between auditors and control owners.Participates in control walkthroughs, assists in gathering audit evidence requests, and coordinates follow-ups.• Coordinates and maintains required documentation to support IT controls and compliance readiness requirements.Ensures proper documentation of control narratives, evidence of control compliance, process flows, diagrams,operating procedures, matrices, and policies.• Continuously analyzes Company assets to identify gaps or vulnerabilities which may lead to security incidents andcommunicates prioritized risk strategies to management.• Works with third-party managed security services provider (MSSP) to perform real-time pro-active monitoring,alerting, logging, and tracking of security specific issues/concerns. Provides security solutions and communicatesidentified issues/problems to management.• Participates in multiple information security projects and department initiatives simultaneously.• Assists with developing incident response procedural documentation, conducting simulated response tests andincident investigations.• Builds detailed project plans to be used as training materials to communicate key milestones, deliverables, andprogress visibility for management.• Responds to after business hour phone calls and resolves problems as needed.Knowledge, Skills and Abilities:• Advanced knowledge of IT audit and/or compliance programs that adhere to established security frameworks.• Advanced knowledge of SAP reporting and transactional applications.• Advanced knowledge of Microsoft Office applications including Excel, Access, Word, Outlook and PowerPoint.• Intermediate knowledge of application security provisioning and governance technologies, authenticationprotocols, cloud security services, LDAP (Lightweight Directory Access Protocol), and domain structures. Basicmathematical skills.• Ability to learn new technology systems, methods and processes.• Ability to analyze complex technical information.• Ability to communicate effectively in written and verbal form.• Ability to research information, establish facts and draw valid conclusions.• Ability to comprehend and interpret information.• Ability to prepare reports and business correspondence.• Ability to reason, form concepts and recognize and solve problems.• Ability to show information in presentation or diagram form.• Ability to maintain confidentiality regarding sensitive information.• Ability to work on-call and flexible schedules including nights, weekends and holidays.• Ability to multi-task, organize, and plan work independently.• Ability to work in a rapidly changing environment.Education, Experience and Qualifications:• Bachelor's Degree in related field and four or more years of related experience; or an equivalent combination ofexperience and/or higher education required.