JOB FUNCTION / SUMMARY: In conjunction with and/or at the direction of CISO, responsible for the overall "health & wellness" of security infrastructure related to enterprise networks and data systems; plans, coordinates, and implements security measures to safeguard data information against accidental or unauthorized modification, destruction, or disclosure by performing the following duties.

ESSENTIAL DUTIES & RESPONSIBILITIES:

Security Environment Analysis:

• Responsible for the analysis & approval of business requirements associated with information security systems and/or processes.
• Translates security design based on business requirements into functional processes while maintaining controls set forth by information security policies/procedures.
• Develops and recommends new or enhanced security and system designs, including documentation of functional specifications for system configuration and supports system requirements as business processes evolve and system enables are identified.

Information Security System Maintenance:

• Responsible for the documentation and maintenance of security systems to include change management processes and tracking requests ensuring on-going changes and developments and upgrades to systems are performed.
• Designs and develops tests, document testing results for newly created functionality associated with system maintenance, enhancements and upgrades to ensure all systems changes are successfully implemented.

Information Security Technical Architecture:

• Plans, researches, designs, analyzes, estimates, identifies options, recommends, installs, tests, schedules, implements, administers, documents, monitors, tunes performance and maintains all primary and auxiliary technical architecture across all information security system platforms as related to assigned areas of specialty to ensure the integrity, security, availability, reliability, and performance of enterprise network & data systems to meet client needs and expectations.

Strategic & Tactical Planning:

• Evaluates and recommends new information security system products or services related to technical architecture to management as needed for developing, monitoring, and maintaining line of business & corporate support unit strategic/tactical plans conforming to the vision, mission, values, and objectives of the organization.
• Confers with management, programmers, risk assessment staff, auditors, facilities, and security departments and other personnel to identify and plan for data security for data, software applications, hardware, telecommunications, and computer installations.
• Develops and implements tests of computer systems to monitor effectiveness of security.
• Develops, coordinates, and implements disaster or emergency recovery procedures for information security systems to assure business continuity/disaster recovery.
• Assists in the development of information security policy and procedures.
• Analyze systems, network, and applications security and recommend/develop security measures to protect information against unauthorized access, modification, and/or loss.
• Works closely with Project Management Office (PMO) through Strategic Services to ensure that all new IT-related projects are reviewed for security prior to rollout.
• Develops and conducts information security risk assessments, reports findings and recommends corrective action, in applicable, to management.
• Coordinates & oversees information security third-party service providers to validate contracted services are provided according to contract and/or service level agreements.
• Supports Internal Auditor and contracted audit vendors related to information security audits and testing of controls

SUPERVISORY RESPONSIBILITIES: None.

MINIMUM REQUIRED EDUCATION, EXPERIENCE & KNOWLEDGE:

• Required: Bachelor’s degree in Computer Science, Computer Engineering or relevant science degree and 5+ years of related experience and/or training.
• Preferred: Senior certifications (i.e. CISSP-ISSAP, SABSA)
• An equivalent combination of education and experience is allowed

ESSENTIAL MENTAL & PHYSICAL REQUIREMENTS:

• Ability to work under stress and meet deadlines
• Ability to operate a keyboard if required to perform the essential job functions
• Ability to read and interpret a document if required to perform the essential job functions
• Ability to travel if required to perform the essential job functions
• Ability to lift/move/carry approximately 10 pounds if required to perform the essential job functions. If the employee is unable to lift/move/carry this weight and can be accommodated without causing the department/division an “undue hardship” then the employee must be accommodated; hence omitting lifting/moving/carrying as a physical requirement.

Equal Opportunity/Affirmative Action Employers. All qualified applicants will receive consideration for employment without regard to race, color, religious beliefs, national origin, ancestry, citizenship, sex, gender, sexual orientation, gender identity, marital status, age, physical or mental disability or history of disability, genetic information, status as a protected veteran, disabled veteran, or other protected characteristics as required by federal, state and local laws.