Lead Information Security Analyst

Trellix•Atlanta, GA

7h•$115,000 - $214,000

About The Position

The Lead Information Security Analyst develops and/or enforces corporate and business-group information security policies that protect Trellix information assets and intellectual property. The role may help plan, direct, or coordinate enterprise security architecture and controls, and lead or contribute to security-control risk assessments and industry-framework certifications. These assessments identify threats, consequences, and vulnerabilities affecting business-unit assets, products, and services. The analyst participates in planning and directing security risk assessments to examine controls and capabilities—including authentication, authorization, integrity, availability, assurance, audit, and disposal—and determine exposure and compliance levels. The role curates and manages the enterprise risk register and its lifecycle, develops and leads information-security awareness and training programs and reporting, and determines applicable compliance requirements and standards. The role may monitor, assess, or execute security controls and tools across Trellix computing and communications environments or enterprise applications; recommend and drive control enhancements; and create designs and technical specifications that align business needs with technical solutions and emerging security technologies. Other possible projects include supplier risk management, disaster recovery, business continuity, crisis management, product security, software development lifecycle security, vulnerability management, penetration testing and reporting, and US Federal cloud-platform security controls certifications and operations. The position requires thorough knowledge of security practices, procedures, and capabilities for analytical work.

Requirements

Bachelor of Science in computer science, computer engineering, and/or information technology.
Thorough understanding of the Information Security Common Bodies of Knowledge.
CISSP, CISM, CRISC, CISA, or equivalent security certification required.
Thorough knowledge of security practices, procedures, and capabilities to perform analytical work.

Responsibilities

Develop and/or enforce corporate and business-group information security policies to protect Trellix information assets and intellectual property.
Participate in planning, directing, or coordinating enterprise security architecture and controls.
Lead or contribute to security-control risk assessments and industry-framework certifications, identifying threats, consequences, and vulnerabilities.
Participate in planning and directing security risk assessments of security capabilities, behaviors, and controls to determine exposure and compliance levels.
Curate and manage the enterprise risk register and its lifecycle.
Develop and lead corporate information-security awareness and training programs and reporting.
Determine sources of compliance requirements and standards.
Monitor, assess, or execute security controls and tools across computing and communications environments and/or enterprise applications.
Recommend and drive security-control enhancements to meet current and future needs.
Create designs and technical specifications that align business needs with technical solutions while considering emerging security technologies.
Contribute to information-security or risk-management projects such as supplier risk management, disaster recovery, business continuity, crisis management, product security, software development lifecycle security, vulnerability management, penetration testing and reporting, and US Federal cloud-platform security controls certifications and operations.