Crown Equipment Corporation is a leading innovator in world-class forklift and material handling equipment and technology. As one of the world’s largest lift truck manufacturers, we are committed to providing the customer with the safest, most efficient and ergonomic lift truck possible to lower their total cost of ownership. The Information Security Analyst 2 will operate and maintain the Company’s Governance, Risk and Compliance (GRC) platform, its libraries, reports, portals, and data integrations to effectively support operations, data accuracy and user processes. This role serves as the primary liaison for GRC software vendors, maintaining contact with vendor representatives, submitting troubleshooting tickets and software feedback to improve the user experience. The analyst will support the Company’s Enterprise Risk Management, Compliance, Vendor Management, Business Continuity Planning, Information Technology and Security, Project Management and Audit Programs with data entry, maintenance, and configuration. Additionally, the role involves developing, maintaining, and distributing custom and ad hoc reporting of risk data including taxonomy analytics and Key Risk Indicators (KRI’s). The analyst will also develop/integrate cybersecurity designs for systems and networks for the processing of company data, document and address the organization's information security, cybersecurity architecture, and systems security engineering requirements, and ensure that acquired or developed systems and architectures are consistent with the company’s cybersecurity architecture guidelines. Furthermore, the analyst will coordinate external risk assessments including audits, gap assessments, and penetration testing to evaluate security architectures and designs to determine the adequacy of security design and architecture. They will also coordinate communication and information sharing aspects of incident response, draft messages and updates for Incident Response Team (IRT) review, handle crisis management issues, and provide guidance and education on incident prevention and response best practices.