Information Security Analyst (App Security & AI Security)

BlueScope•Ohio - Remote, OH

About The Position

The Information Systems department provides tools and automation to store, organize and manipulate data while making that data easily retrievable. Various hardware and software tools, along with support, combine to enable these functions in a cost effective method that helps to increase efficiency and accuracy. The IT Security Manager ensures the company’s data and systems are sufficiently secure by understanding information security risks while developing and enforcing policies and procedures to mitigate them. Provides the IS security function, including reviewing, planning and implementation, and management of security controls for the organization Creates and maintains the enterprise’s Business Continuity Plan and Disaster Recovery Plan Establishes a security stance through policy, architecture and training processes Oversees the operations of the enterprise’s security solutions Interfaces with peers in the development and network departments as well as with the leaders of the business units to both share the corporate security vision with those individuals and to solicit their involvement in achieving higher levels of enterprise security through information sharing and co-operation Leads the selection of appropriate security solutions, and oversees any vulnerability audits and assessments Manages security exemption processes, particularly where it involves shared risks to the company’s systems and data

Requirements

Bachelor’s degree or 4 years of additional relevant experience in lieu of degree
5 years of experience in information security management or related functions

Nice To Haves

Bachelor’s degree in the field of business administration, computer science, finance, or information systems
7+ years of experience in information security management or related functions
Information Security Management qualifications such as CISSP, CRISC or CISM

Responsibilities

Provides the IS security function, including reviewing, planning and implementation, and management of security controls for the organization
Creates and maintains the enterprise’s Business Continuity Plan and Disaster Recovery Plan
Establishes a security stance through policy, architecture and training processes
Oversees the operations of the enterprise’s security solutions
Interfaces with peers in the development and network departments as well as with the leaders of the business units to both share the corporate security vision with those individuals and to solicit their involvement in achieving higher levels of enterprise security through information sharing and co-operation
Leads the selection of appropriate security solutions, and oversees any vulnerability audits and assessments
Manages security exemption processes, particularly where it involves shared risks to the company’s systems and data
Establishment of a security risk register and maintain, with a plan to address key risks
Produce and maintain a security program of work for a rolling 12-month period
Create, and maintain the company’s security awareness training program.
Create and maintain the company’s security documents (policies, standards, baselines, guidelines and procedures)
Create and maintain the company’s Business Continuity Plan and Disaster Recovery Plan
Conduct and coordinate testing of procedures and systems every six months