IT Security Analyst

The position is in the Strategy, Planning and Execution (SPE) team, in the Information Risk Management (IRM) department. IRM is responsible for managing the Information Security risk for the organization. The SPE team leads the creation of the multi-year strategy and IRM roadmaps, and manages the execution of the plans. SPE also defines the corporate security standards, performs risk assessments, and measures organizational security performance.

ESSENTIAL FUNCTIONS

• Perform application and system risk assessments and security audits of internal and external facilities against established standards
• Provides consultative advice to information security customers that enables them to make informed risk management decisions
• Contribute in establishing policies and procedures necessary to ensure the security of information system assets, and to protect them from intentional or inadvertent access, disclosure, or destruction
• Assists project teams in the implementation of security measures to meet corporate security policies and external regulations, e.g., Sarbanes Oxley, HIPAA
• Weigh business needs against security concerns and articulate issues and options to management
• Maintains appropriate security documentation for applications and systems
• Ensures that user community understands and adheres to necessary procedures to maintain security
• Communicates risk assessment findings to information security "customers," or business partners
• Active participation in strategic initiatives in accordance to the IRM roadmap

Qualifications

QUALIFICATIONS

Additional Information

All your information will be kept confidential according to EEO guidelines.

J-18808-Ljbffr